Wireguard performance on hap AC2

RouterOS General
1

Hi,

I’m running a hap AC2 with ROS 7.4.1 on a gbit PPPoe connection. I use fasttrack and masquerade and the non-VPN speeds are as expected - 900Mbps download and 900Mbps upload.
If I connect the router to a Wireguard gigabit VPS server with the same speed capacity (tested using iperf and speeds are also maxed out - 900Mbps up/down), the results are the following:

Download 240Mbps
Upload 130Mbps

My question is, is it normal for upload speeds to be almost 50% less than download because of the way Wireguard is not using any hw offload and the cpu is bottle-necked as result?
Seems like decryption is way faster than encryption on this router, can someone with the same router confirm?

Btw I’m using proper MTU values, 1492 for PPPoE and 1432 for Wireguard on both peers.

2

I get 245/207 Mb/s on a hap ac2 using wireguard. CPU is above 90%, so I think this is the max one can get with this hardware. 1G/1G Uplink.

3

Cannot remember the last time I tested but it was something like 300 up 300 down on CCR1009, 1 gig on either end.