For most ipsec tests on 3n-icx, AVF puts all tunnels into a single RXQ, but dpdk plugin distributes them fairly.
Telemetry showing 40tnl test on AVF [0], compared to Cx6dx with mlx5 driver (dpdk plugin) [1].
Current trending [2] shows this issue.
(And also two-band structure for 4c AVF tests caused by which testbed got reserved, which is probably not related to this RSS issue).

[0] https://s3-logs.fd.io/vex-yul-rot-jenkins-1/csit-vpp-perf-mrr-daily-master-3n-icx/433/log.html.gz#s1-s1-s1-s1-s20-t1-k2-k13-k9-k14-k1-k1-k1-k1
[1] https://s3-logs.fd.io/vex-yul-rot-jenkins-1/csit-vpp-perf-mrr-daily-master-3n-icx/433/log.html.gz#s1-s1-s1-s1-s8-t1-k2-k13-k9-k14-k1-k1-k1-k1
[2] https://csit.fd.io/trending/#eNrtlMGKwjAQhp-me5GBpjbWiwe177HE6aiBpo1JVluffmN3YSqLsOjCHvSSQP7J_H8-hvjQOnr3VC8SuUqKVZIVuopLMl1O4na0FqYNaOxApOmOMiuwm1UdmLqTgK63oQUhxXwDAoHCXttcW08Yq9PQ1P4E8WSjPIFuAijymZzt0IBx7uKSrS8u1Ue4smTF7ntWbgbheuVI8YWvfKwG8iOj36flDlunDHl9Jm4zvJ4rMPIciXjtHno7Ur8hFOVQ8Qj8_AX_J_z8j-HTXKR4AHXc_vPkc5Dnmfxb8PMX_PsnX5ZvTevM8PfL8hMROrZ7