A method, comprising: receiving, by a network device and from a transmitting network device, a packet via a tunnel, of a plurality of tunnels between the network device and the transmitting network device, wherein the packet includes a first outer internet protocol, IP, header, a Generic Routing Encapsulation, GRE, header, a second outer IP header, an Encapsulating Security Payload, ESP, header that provides encryption of an inner packet of the packet, and the inner packet, wherein the inner packet is encapsulated by the ESP header, the ESP header is encapsulated by the second outer IP header, the second outer IP header is encapsulated by the GRE header, and the GRE header is encapsulated by the first outer IP header; decapsulating, by the network device, the packet to remove the first outer IP header and the GRE header from the packet; identifying, by the network device and after decapsulating the packet, a sequence number associated with the ESP header; causing, by the network device, the sequence number to be stored in a data structure; decrypting, by the network device and after decapsulating the packet, the packet to identify the inner packet; causing, by the network device, one or more actions associated with the inner packet to be performed; receiving, by the network device, via a different tunnel, of the plurality of tunnels between the network device and the transmitting network device, an additional packet, wherein the additional packet includes an additional first outer IP header, an additional GRE header, an additional second outer IP header, an additional ESP header, and an additional inner packet, wherein the additional inner packet is encapsulated by the additional ESP header, the additional ESP header is encapsulated by the additional second outer IP header, the additional second outer IP header is encapsulated by the additional GRE header, and the additional GRE header is encapsulated by the additional first outer IP header; decapsulating, by the network device, the additional packet to remove the additional first outer IP header and the additional GRE header from the additional packet; identifying, by the network device and after decapsulating the additional packet, a sequence number associated with the additional ESP header; obtaining, by the network device and from a data structure, a sequence number associated with the ESP header; determining, by the network device and based on the sequence number associated with the additional ESP header and the sequence number associated with the ESP header, that the additional inner packet is a copy of the inner packet; and causing, by the network device and based on determining that the additional inner packet is a copy of the inner packet, the additional packet to be discarded. receiving, by a network device and from a transmitting network device, a packet via a tunnel, of a plurality of tunnels between the network device and the transmitting network device, wherein the packet includes a first outer internet protocol, IP, header, a Generic Routing Encapsulation, GRE, header, a second outer IP header, an Encapsulating Security Payload, ESP, header that provides encryption of an inner packet of the packet, and the inner packet, wherein the inner packet is encapsulated by the ESP header, the ESP header is encapsulated by the second outer IP header, the second outer IP header is encapsulated by the GRE header, and the GRE header is encapsulated by the first outer IP header; decapsulating, by the network device, the packet to remove the first outer IP header and the GRE header from the packet; identifying, by the network device and after decapsulating the packet, a sequence number associated with the ESP header; causing, by the network device, the sequence number to be stored in a data structure; decrypting, by the network device and after decapsulating the packet, the packet to identify the inner packet; causing, by the network device, one or more actions associated with the inner packet to be performed; receiving, by the network device, via a different tunnel, of the plurality of tunnels between the network device and the transmitting network device, an additional packet, wherein the additional packet includes an additional first outer IP header, an additional GRE header, an additional second outer IP header, an additional ESP header, and an additional inner packet, wherein the additional inner packet is encapsulated by the additional ESP header, the additional ESP header is encapsulated by the additional second outer IP header, the additional second outer IP header is encapsulated by the additional GRE header, and the additional GRE header is encapsulated by the additional first outer IP header; decapsulating, by the network device, the additional packet to remove the additional first outer IP header and the additional GRE header from the additional packet; identifying, by the network device and after decapsulating the additional packet, a sequence number associated with the additional ESP header; obtaining, by the network device and from a data structure, a sequence number associated with the ESP header; determining, by the network device and based on the sequence number associated with the additional ESP header and the sequence number associated with the ESP header, that the additional inner packet is a copy of the inner packet; and causing, by the network device and based on determining that the additional inner packet is a copy of the inner packet, the additional packet to be discarded.