Each Express Route connection includes two Microsoft Enterprise Edge and two-router

connections in between the connectivity provider and the local network perimeter. Microsoft ensures

there's a BGP connection between the connectivity and the edge of the on-premise network one each

allocated for the MSEE router. For the validation of the SLA, there must be a redundant layer 3

configured.

To encrypt this connection, users have the option to create an IPSec Tunnel which limits the throughput to only 1.25Gbps. Standard IPSec encryption in the cloud, or from your data center to the cloud, is limited by a single core processing to 1.25 Gbps.

High Performance Encryption with InsaneMode - Aviatrix Insane mode is integrated into the Transit Network solution to provide 10Gbps performance between on-prem and Transit VPC with encryption. For VPC to VPC, Insane mode can achieve 25 - 30Gbps.