This is certainly going to be a great topic! All things being equal, I expect VXLAN to perform slightly better. A quick AI search reveals the VXLAN header itself is 8 bytes long. However, the complete VXLAN encapsulation adds a total of about 50 bytes to the original Ethernet frame, including an 8-byte VXLAN header, an 8-byte UDP header, a 20-byte outer IPv4 header, and a 14-byte outer Ethernet header. An additional 4 bytes for an 802.1Q tag may be included for a total of 54 bytes. The size of an IPsec header, on the other hand, varies depending on the protocol (ESP or AH), the mode (transport or tunnel), and the algorithms used for encryption and authentication. For example, in tunnel mode with an outer IPv4 header, the additional overhead is at least 58-73 bytes for ESP, which includes an 8-byte ESP header and a 16-byte Initialization Vector (IV).
... View more