HAP AX2 IPSEC performance vs Wireguard

Well, well, well… I redid the test just for you, just this one time… and I got similar results to yours.

Somehow aes128-cbc/sha1 or sha256 loads the cpu excessively. GCM modes give the results I expect and that I’ve outlined above.

I don’t recall the details of my previous testing. It might not have involved cbc/hmac modes or this may be a regression. Oh, I did the testing on 7.19.3 as well. The “Hardware AEAD” flag is shown in all configured modes.