Very poor GRE Tunnel IPSec performance after upgrade to CCR1009-7G

After upgrading from a RB3011, the connection speed between my sites, using the GRE Tunnel, has plummeted.

With the RB3011 I could get around 90 Mbps before 1 or more of the cores on the CPU would top out and become the bottleneck over the link.

With the CCR1009-7G I can never get more than 6 Mbps, with practically no load on the CPU.

If I disable the security on the CCR and run the tunnel without encryption, the speed is ~250 Mbps.

Now if I disable the tunnel and VPN into the CCR, I get ~125 Mbps…

I do not understand why I’m getting such poor performance over the GRE Tunnel, and I have unfortunately ran out of ideas to diagnose the issue on my own.

Any help is appreciated.

http://forum.mikrotik.com/t/is-re-ordering-fixed-yet-with-ipsec-and-hardware-acceleration-updating-thread/101814/1

Okay I updated to 6.39rc62 and seems to have fixed my issues.

Thanks for your help!