rx queue hashing for tunelled traffic

Hello, group

I have a network spreading multiple datacenters with FreeBSD 14.3
routers with Mellanox NICs providing connectiviy between VMs within and
between datacenters. Within datacenters the routers have multiple VLANs
and between them traffic is tunelled, either using Wireguard over the
Internet or gif(4) over my own fibers. There is pf running on the routers.

Unfortunately each tunnel is a single flow which ends up on a single rx
queue and a single interrupt. On each router there is always one CPU
core with way more usage and ps shows one intr{irqX: mlx5_core0} and one
intr{swi1: netisr X} consuming the most of CPU time.

It seems to me that the only option to get rx hashing working is to use
tunnel that is hardware accelerated in the NIC. And that would be vxlan,
which seems hardware accelerated on Mellanox. But my NICs are behind
lagg and this feature is not passed through.

Any other ideas?

-- 
| pozdrawiam / regards | Powered by Debian and FreeBSD  |
| Kajetan Staszkiewicz |   www: http://tuxpowered.net   |
|                      | matrix: @vegeta:tuxpowered.net |
`----------------------^--------------------------------'

-----BEGIN PGP SIGNATURE-----
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=Nhme
-----END PGP SIGNATURE-----