My RB760 (os version 6.47.7) is used as IPSec server (IKEv2 with certificates) connected with a linux box (intel i7 with aes-ni) running StrongSwan as client on a LAN port. Also connected to the RB760 is an Apple Mini Mac (i5). Running iPerf3.7 on both machines with AES-128-CBC-HMAC(SHA1) I am getting around 300Mbps from the Linux box to the Mac and around 240Mbps the other way around with 2 connections. Adding more connections actually reduces overall performance. Doing it the other way around: having the IPsec connection with the Mac actually reduces performance. Testing directly from the Linux box to the Mac (with the RB760 only as switch) I can reach 600Mbps+ so it shouldn’t be a hardware limitation on my desktop side.
Of course I am very happy with these numbers, but I see that the RB760 should be able to do 400+ in a test setup. What should I change in order to get those performance numbers?