Stack VLAN tags, GRE, VXLAN and IPsec to see total per-packet overhead, goodput and remaining MTU.
Overheads stack additively because each layer wraps the one below, so a VXLAN frame inside an IPsec tunnel with a service tag pays for all three headers. Goodput is the payload's share of the resulting frame at line rate. Stacked encapsulation is how a 10G link quietly delivers 8.9G of useful data, and it is what determines whether jumbo frames are mandatory in the underlay.
Encapsulation Overhead
total overhead = 4 × VLAN tags + 24 (GRE) + 50 (VXLAN) + IPsec ESP bytes; goodput = link rate × payload ÷ (payload + overhead).
total overhead = 4 × VLAN tags + 24 (GRE) + 50 (VXLAN) + IPsec ESP bytes; goodput = link rate × payload ÷ (payload + overhead). Overheads stack additively because each layer wraps the one below, so a VXLAN frame inside an IPsec tunnel with a service tag pays for all three headers. Goodput is the payload's share of the resulting frame at line rate.
Stacked encapsulation is how a 10G link quietly delivers 8.9G of useful data, and it is what determines whether jumbo frames are mandatory in the underlay.
This calculator takes 6 inputs: Inner packet size, 802.1Q tags (QinQ = 2), Add GRE (24 B), Add VXLAN (50 B), IPsec protection, Link rate. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.