tcp md5 / ipsec


without tcp md5 or ipsec in place, big tcp windows are risky

default window unless tcp md5 or ipsec are used, then go to 64k

conclusion: ipsec improves performance :)