IEEE 802.1AX and 802.3ad define Link Aggregation and LACP. By configuring a vPC pair on Nexus switches and bundling member links into a LACP-based EtherChannel, you both double (or more) the logical bandwidth and gain seamless hitless failover-resolving congestion and enhancing resilience per the IEEE specs.

This configuration enables checksum and segmentation offloading to reduce CPU overhead and provides high parallelism with 128 transmit queues, which is suitable for handling large data segments and high traffic loads typical in financial applications processing HTTP/HTTPS data.
The ring size of 64 balances buffer size with latency.
Disabling either RCO or TSO (as in other options) would increase CPU load due to software processing of checksums or TCP segmentation, worsening CPU contention.

Cisco's VDC technology (available on Nexus 7000/7700 series switches) allows a single physical switch to be virtualized into multiple independent logical devices. It perfectly maps to all the customer's requirements:
Separate TCAM, QoS tables, and data planes: Unlike VRFs (which only isolate the control/routing plane), VDCs provide complete hardware-level isolation. Each VDC has its own allocated physical ports, memory, TCAM resources, QoS policies, and independent data plane processing.
Logically partition into separate security domains: Because the control and data planes are completely isolated, a failure or security breach in one VDC cannot affect another. They are treated as entirely separate physical switches.
Cut costs on additional equipment: It eliminates the need to buy multiple physical core/aggregation switches to achieve this level of strict infrastructure isolation.