Hello,
the same problem here - two ccr1009 over 1 Gbit/sec fiber links attached to the same switch. This is the result of a bandwith test performed on a weekend with no other load on the network:
Receive test across GRE/IPsec tunnel (with CPU load):
GRE receive bandwith test.png
Send test across GRE/IPsec tunnel (with CPU load):
GRE send Bandwidth test.png
Current setup:
RouterOS 6.44.6
Fiber WAN Link, latency below 1 msec
CCR1009-7G-1C---GRE/IPsec (aes256cbc/sha256 actual MTU = 1422 (Auto)---CCR1009-7G-1C
Believe me, I have spent days of tinkering with encryption algorithms and other advice from the forum. I can only come to the conclusion that this has to do with the single core performance of the tile GX CPU. Apart from a configuration error (I am by no means a network expert), I believe that this will not be resolved until there is more multithreading and/or better hardware encryption support.
You do not have the required permissions to view the files attached to this post.