Hi, how much bandwidth am I supposed to get through a hEX (RB750Gr3)? I currently only get around 100 Mbit/s with iperf3, 1-4 parallel streams, no additional parameters, no difference if 1 or 4 streams.

My IPSEC site to site connection has the following properties:

IKEv2
AES256-CBC
SHA256
MODP2048

Values are same for Proposal and Profile. The other side is a CHR VM which achieved a throughput of over 2 Gbit/s to another CHR VM.

I have already disabled connection tracking on both sides using Raw Firewall rules (action "no track" in both directions for the tunnel endpoint networks).

None of the CPU cores is at 100%, they are all below 50%.
CPU Profiler says the CPUs are mostly busy with networking.

According to installed SAs, hardware offloading is active.

Thanks!

turns out, i am a complete moron. i had a 100 Mbit connection between the two endpoints because the cable i used appearently wasn't capable of Gbit. Best thing is that I knew that and wanted to swap it out later. Well, I guess I had forgotten about that. lol.
Anyway, now I get around 310 Mbit/s with no matter if 1, 2, 3 or 4 parallel streams. Bazinga!