Presumably you don’t need to handle traffic at line speed, you just need to process it faster than userspace applications can produce and consume it.

What I don’t really understand is why iptables and tv is so slow.

If the kernel can’t route packets at line speed, how are userspace applications saturating it?