Yes, as I said, we're using ISA-L. This is Intel's library with thin wrappers around hand-tuned assembly routines for crypto.

The traffic is mostly long-ish lived connections. Eg, the duration of a TV show or movie. So there is some churn, but not a lot.

This is all TCP. By "UDP TLS", I assume you mean Quic?