This ensures that packets on sun are processed on a particular CPU and not randomly on one, which causes expected SAs not to get created or other weird things.
Basically the same as the one without UDP encapsulation, but here the outbound SAs use random source ports.