I got a chance to try a few more things:
- IPSec over GRE. SSH is much more responive over the tunnel, but the ssh connection is dropped quite often with packet corruption error
- plain old IPsec in tunnel mode. SSH latency came back.
- Reverted back to 1.9.0 release firmware - same behavior there.
Is anyone else seeing the same problem?