Keepalives / Heartbeats
Overhead from keepalives or heartbeats is configurable. This will almost always dominate the idle cost of an IPSEC tunnel. RFC3706 contains some abstract discussion of this and I think it'll be a good resource for you.
Additionally, IKE SAs are periodically re-keyed to maintain cryptographic resilience. Re-keying costs on ...