Methods, systems, and apparatus for Internet Protocol security (IPsec) selector coalescing for per-host Security Associations (SAs) are disclosed. In one aspect, separate per-host SAs are assigned, by a network communications device including one or more processors, to each of two or more different source communication devices that each communicates with corresponding destination devices. While the separate per-host SAs are assigned to each of the two or more different source communication devices, a group SA is generated. The group SA is assigned, by the network communications device, to all of the two or more different source communication devices. The assignment of the separate per-host SAs is removed from each of the two or more different source communication devices.