Update: 3/12/2017: 6.39rc51 is shown to have fixed the re-ordering issue. Testing is still being done to confirm performance. Please test if you can. This has been confirmed by fixed by two users. Bandwidth @ 1ms is around 700Mbit (1Gbit link) single stream TCP on MTU 1400.
Update: 2/14/2017: Still not fixed. Latest update from Alex Hart: http://forum.mikrotik.com/viewtopic.php ... 02#p583602
Update: 1/18/2017: Still not fixed. alexjhart and I have both checked our tickets with Mikrotik and received the following response:
Update: 10/18/2016: Mikrotik has just released another hardware accelerated platform (MIPS based) that does NOT have a re-ordering problem: http://forum.mikrotik.com/viewtopic.php ... 59#p563380We will continue to work on this problem when ike2 main features will be finished.
This post *ONLY* impacts the Tile based platforms. The CCR platform is still suitable if your traffic is low enough (~<250Mbit), if you disable hardware acceleration: http://forum.mikrotik.com/viewtopic.php ... 01#p558911
Since Mikrotik has been rather silent about an actual ETA about fixing this, I will create a thread to update as versions are released to notify everyone if it is fixed or not.
The IPSec hardware acceleration is useless in general, packets are randomly reordered creating disastrous effects on TCP and UDP streams. Until this is fixed, you should only use non-hardware accelerated implementations (CTR).
http://forum.mikrotik.com/viewtopic.php ... 48#p538801
6.37 (NOT fixed):
# date; ping -c 10 -l 10 10.50.85.140 Fri Sep 23 19:34:11 EDT 2016 PING 10.50.85.140 (10.50.85.140) 56(84) bytes of data. 64 bytes from 10.50.85.140: icmp_seq=3 ttl=62 time=0.742 ms 64 bytes from 10.50.85.140: icmp_seq=4 ttl=62 time=0.755 ms 64 bytes from 10.50.85.140: icmp_seq=6 ttl=62 time=0.749 ms 64 bytes from 10.50.85.140: icmp_seq=8 ttl=62 time=0.742 ms 64 bytes from 10.50.85.140: icmp_seq=9 ttl=62 time=0.750 ms 64 bytes from 10.50.85.140: icmp_seq=1 ttl=62 time=0.801 ms 64 bytes from 10.50.85.140: icmp_seq=7 ttl=62 time=0.763 ms 64 bytes from 10.50.85.140: icmp_seq=10 ttl=62 time=0.753 ms 64 bytes from 10.50.85.140: icmp_seq=2 ttl=62 time=0.788 ms 64 bytes from 10.50.85.140: icmp_seq=5 ttl=62 time=0.777 ms --- 10.50.85.140 ping statistics --- 10 packets transmitted, 10 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.742/0.762/0.801/0.019 ms, pipe 10