A load balancer is provided that can direct Internet Protocol Security (IPsec) traffic received from a single IPsec tunnel initiator to one of a plurality of endpoints provided Virtual Private Network (VPN) gateways in a network. The load balancer uses IP (Internet Protocol) addresses and SPIs (Security Parameter Identifier) to identify an endpoint responsible for processing particular packets for the VPN. Messages received at the load balancer from the endpoints are utilized to map endpoints responsible for processing packets having a particular IP address and SPI for forwarding IPsec traffic to the correct endpoint.