replace tunnel encryption to AES-NI