[QOS] traffic-policy shaper is reducing the performance of ipsec tunnel

qos

#1

Following is my topology:
I have created three vpn ipsec site to site tunnel by using one vpn gw on one side and three different vpn gws on other side. When I use only one tunnel I am getting around 800 mbps throughput. If I use all the three tunnels at a time I am getting around 325 mbps throughput in each tunnel but when I apply qos of 350 mbps on each tunnel throughput reduces to around 230 mbps per tunnel. I am using following commands for qos. what is causing that much perfrmance drop?
set interfaces vti vti0 redirect ‘ifb0’
set interfaces vti vti1 redirect ‘ifb1’
set interfaces vti vti2 redirect ‘ifb2’
set interfaces input ifb0 traffic-policy out ‘INGRESS’
set interfaces input ifb1 traffic-policy out ‘INGRESS’
set interfaces input ifb2 traffic-policy out ‘INGRESS’
set interfaces vti vti0 traffic-policy out ‘EGRESS’
set interfaces vti vti1 traffic-policy out ‘EGRESS’
set interfaces vti vti2 traffic-policy out ‘EGRESS’
set traffic-policy shaper EGRESS bandwidth ‘350mbit’
set traffic-policy shaper EGRESS default bandwidth ‘100%’
set traffic-policy shaper INGRESS bandwidth ‘350mbit’
set traffic-policy shaper INGRESS default bandwidth ‘100%’


#2

Hello!
Can you check this commands for all interfaces to figure out if reason in shaper or not?

sudo tc -s class show dev [device name]
sudo tc -s qdisc show dev [device name]