pfSense » pfSense Docs

Under the right conditions it could theoretically approach the performance of WireGuard or IPsec.

It should be replaced with:

Under optimal circumstances, it has the potential to match or surpass the capabilities of WireGuard or IPsec.

IPsec is faster than other choices when configured correctly and when using hardware acceleration. If both client and server support IPsec, use IPsec. WireGuard is nearly as fast, however, and depending on the environment and availability of hardware acceleration, may be faster in some cases.

It is worth evaluating if IPsec remains the most efficient VPN option on the pfSense platform. OpenVPN, when configured with DCO, has the ability to equal or even exceed the performance of WireGuard or IPsec.