You could always try a MicroTik or EdgeRouter.
Microtik I've not done much with, but works really well by all accounts:
https://routerboard.com/RB750Gr3
EdgeRouter has a hardware offload function for IPSec networking, however you may have to drop to the CLI to get the config up and running...