You need 10gbps and ipsec with it, or do you need a 10gbps ipsec tunnel. The first you'd have to run x86 hardware with good processors. Your ipsec will be limited by the lack of crypto hardware so it'll be sharing the cpu so it's limits are the cpus you choose. The second... how much you willing to spend? Cavium networks makes the OCTEON XL NICPro that can do 10gbps but I doubt mikrotik supports it. I really wish they did. Those cards are about $3k each then you have to have drivers to support them. They would be great though as they could easily crunch the routing for 10gbps+ so there isn't any load on the processors. Then it comes down to how much the pci-x bus can handle.