yes encryption (and database) is the hot spot when I do load testing, the bit in the middle can be optimized to near nothing.