Ah, that makes sense. Thank you for putting the feature request in. I'll revert to using a local VPN client for the time being.

In your experience, how long until the mothership would implement such a request?

Support sent me an RC of 4.3.2 which I can confirm resolves the performance issues I saw on WAN2 to other internet devices. Tested using 2 devices running iPerf each connected a gigabit line over the internet. 900Mb/s - 920Mb/s throughput even with WAN1 enabled in standby mode. Excellent!

Sadly it didn't address NAT loopback performance nor did it add support for Hardware Acceleration for IPSec tunnels in NAT mode. Hopefully that will follow.

@admin3 did HA for IPSec tunnels in NAT mode make it onto the firmware roadmap for implementation?

The firmware team are still looking into it, it's quite a bit more complex for them to accelerate NAT VPN traffic and NAT loopback traffic.

It's good to know that the new firmware has improved performance overall for you though

@admin3 Did the firmware team make any progress on this issue?

My 2865 is connected to a gigabit link and when high volume traffic is sent over the VPN Tunnel (in NAT mode), the router's CPU is pegged at 100% causing high latency on all LAN & WAN ports.