good morning!
i have a one question, now i use mikrotik hex and hap lite as a simple switch to expand ports with 100mbit and wifi 2.4, everything works fine, but I would like a little to expand my network.
I want to buy mikrotik L009 as a single device instead of the first two. But will it be as productive? My mikrotik hex is enough to mark traffic in the L2TP\IPsec tunnel with a speed of 80 Mbit, more is not possible because the CPU3 is 100%, but this is quite enough for me. what will be the speed on L009?
I asked to take an mikrotik ax lite from a friend o try to evaluate the speed of mikrotik ax lite(since it is similar in processor). and its routing speed is much higher than Mikrotik Hex, but the ipsec is only 35 Mbps at 80% of the processor, which is just a disaster.
I looked at the routing tests, NAT, witout fasttrack, wireguard where Mikrotik AX Lite was compared with Mikrotik L009 and AX lite was 15% faster, does that mean that I will get even worse ipsec on Mikrotik L009?
Oh, but it does already for quite a while. Since 7.10beta5.
I even tested it (AX Lite towards RB5009).
http://forum.mikrotik.com/t/hap-ax-lite/164010/79
But make sure common settings are used which result in HW offload on both ends.
Mikrotik ax lite because it has a similar processor ipq-5010. L009 have ipq-5018 and in its description(https://mikrotik.com/product/l009uigs_rm) it is written ‘L009 IPsec hardware encryption ensures lower CPU usage without measurable performance degradation compared to the regular driver. You can expect around 60-90 Mbps throughput using a 1400 byte packet size.’ but I couldn’t find the ipsec test results anywhere 
. at the same time there are tests of routing, cpu, and ax lite(ipq-5010) is 15% faster. does this mean that 5018 has hardware ipsec unloading, but 5010 doesn’t have hardware ipsec unloading, but that’s it’s 15% faster?
Thanks for your feedback. I also tested ipsec on ax lite and in btest on LAN it was 50-65 Mbps, but on mangle and routing in l2tp/ipsec the speed is no more than 35 Mbps, firmware 7.16.2, absolutely the same results (35 Mbps) were obtained in one of the reviews on the Internet, so I think that this is the speed I am interested in.
Similar not same 
AX Lite doesn’t support ipsec hw acceleration, so ipsec will be slower on AX Lite
I dont seem to notice how the ax lite has faster routing on the datasheet?
L009:
970.3 @ 1518 byte
42.4 Mbps @ 64byte
ax lite:
946.5 @ 1518 byte
41.3 @ 64byte