Re: Slow ipsec troughput with offload enabled

I have a GRE tunnel inside IPSec, that should be a TUN interface.

Using --print_mss option on iperf, it shows this:

[ 3] MSS size 1354 bytes (MTU 1394 bytes, unknown interface)

My GRE tunnel, has MTU of 1406:

# show interfaces tunnel tun0
 address 172.16.0.102/30
 description "GRE DC"
 encapsulation gre
 firewall {
     in {
         modify GRE_POLICY
     }
 }
 ip {
     ospf {
         dead-interval 40
         hello-interval 10
         network point-to-point
         priority 1
         retransmit-interval 5
         transmit-delay 1
     }
 }
 local-ip 1.1.1.1
 mtu 1406
 multicast disable
 remote-ip 1.1.1.2
 ttl 255

# show firewall modify GRE_POLICY
 rule 10 {
     modify {
         table main
     }
 }