Mikrotik cuts GRE + IPSEC speed, what could be the problem?

Question

PHP

Good afternoon, there is a central router to which all branches are connected, when measuring speed through the BTest utility of external addresses, the speed is about 80 Mbps, when measuring speed inside the VPN, the speed is somewhere around 20 Mbps, if you disable IPSEC, then the speed is similar to the truth about 80 Mbps, processor load is almost no. There is another branch that is also connected to the central one and the speed is cut there but not so much, the only difference between them is that different providers and equipment, where the speed is cut strongly up to 20Mbps, costs 2011UiAS and the Rostelecom provider, and where there are more or less speed provider Beeline and costs CCR1016-12G, in the central provider Rostelecom
and CCR1016-12G, what could be the problem?

Answer 1

echo str_replace("[", "[привет|", "У меня есть [красное] и еще [зеленое] яблоко")

Answer 2

from the rb series, only 1100 and 750gr3 can pull ipsec or ccr, the rest have weak processors and will not pull encryption

Answer 3

In the absence of hardware encryption.
Alternatively, you can disable conection_tracking, but this most likely will not give noticeable results.

Answer 4

did not understand, with ipsec enabled, what are the cpu values?