Throughput and Multiple Tunnels
Each tunnel is limited to approximately 1 Gbps. To achieve higher throughput, you can establish multiple tunnels.
If you set up multiple tunnels:
- We recommend that you divide the traffic between the tunnels either through load balancing with ECMP (Equal-cost multi-path routing) or assigning traffic through policy-based routing.
- You can initiate multiple IPsec tunnels from the same device to increase the bandwidth (1 Gbps per tunnel); however, you cannot aggregate multiple tunnels from different devices in the same network tunnel group. Multiple tunnels in one network tunnel group must originate from the same network device.
- The number of supported ECMP tunnels is 10. For information about ECMP, see RFC 2991.
Note: To protect against a loss of connectivity, set up redundant tunnel headends for a network tunnel group and monitor your IPSec tunnels. You'll need to update their local routing to send traffic to the secondary headend when the primary is unreachable. For more information, see Manage Network Tunnel Groups.