Hi,
reading wikipedia I noted that all HWL3 offloading examples are valid from port to port
is there any chance (dump question) to apply HWL3 offloading to VPN traffic?

VPN traffic is handled by the CPU, not by the ASICs. Many of the CPU's have encryption acceleration, so in this case you want the CPU to take that load.