Hello,

(LAN1)-----[CCR1009]-----100Mbit_WAN-----[CCR1009]-----(LAN2)

I create ipsec tunnel sha1/aes128-cbc
file copy from LAN1 to LAN2 ~1.4 MBytes/s
file copy from LAN2 to LAN1 ~5 Mbytes/s

Why ipsec tunnel so slow?

What do you mean with "file copy"? Copy file to/from a Windows file server?
What is your pingtime across the link?
Did you test linear protocols like FTP or HTTP?

File copy from Windows.

On non-Mikrotik tunnel file copy ~10.5 MBytes/s

You opened 2 threads so I will continue in the other one.

its two different topics. one with ipsec, another without.