Low speed

Good afternoon.
Situation:
We have a local network and a remote server.
The server has vmware esxi 6.5 installed and several virtual machines (win) and RouterOS are raised.
The ipsec tunnel is up (encryption aes-128, modp2048) between RB3011UiAS and RouterOS v6.40.4.
On the router side, the Internet speed is 150 Mb / s. From the side of RouterOS - 500 MB / s.
When copying files from one side to another, the speed rests at 5-6 MB / s.
On the router and on the routeros, the CPU load when copying does not exceed 10%.

Tell me where to dig? Or with the current topology, is this the limit?
If you need more information, ask.
Thank you in advance.

Hi have you tried measuring the bandwidth without encryption? This would be then your baseline. Your baseline should be close to channel limit, so the lowest of the two, 150mb/s

With encryption it will be reduced, since 3011 doesn’t do IPSec in hardware.
What do you mean by “RouterOS”? CloudHostedRouter?

Another thought wrt encryption: do you have fragmentation (&/of reordering) of internal packet when encapsulating? That will definitely kill throughput.