Performance improvement: route programming performance - time to program a IPSec tunnels and routes pointing to them grows exponentially with the number of tunnels+routes already programmed. Not getting anywhere near the advertised route programming rate (700k routes/sec). 

For more info, please contact jmedved

ondrej-fabry can provide exact numbers.