The igb driver included in VyOS does not enable multiqueue by default. It's enabled by default in the version included with Linux.
This reduces the overall performance of the router especially during an attack.
I worked around it by placing this in /etc/modprobe.d/igb-options.conf:
options igb RSS=0,0