"Defend against vampires with 10 gbps network encryption" by Romain Huon includes a ton of useful tips/tricks for performance tuning on 10GbE wireguard/vxlan links: https://www.synacktiv.com/en/publications/defend-against-vampires-with-10-gbps-network-encryption