Cool: Linux TCP Tuning
I have been dealing with the oppression of the IPsec and tunneling. Multiple vendors, hardware and software, etc, etc,e tc. Fun! All software - especially VPN software - sucks. All of it. =) Typo, Ruby, Rails, Python.
In the meanwhile, this site claims to have a good suggesting for calculating bw/ip/tcp memory requirements.