continuing speed problems

trainwreck

still having speed problems with openvpn & win7 clients. i'm not even gonna go into the history of configurations i've tried. I have just set up a new openvpn server as a test, running on ARch Linux fully updated. server hardware is an Intel Core i3 3.3GHz CPU, 4GB DDR3 1333 RAM, Intel i350 4-port PCI-e network card. win7 client hardware is Intel i7 4770K @4GHz, 8GB DDR3 1193MHz, Intel i-217 gigabit onboard NIC. On the LAN, running an iperf without openvpn in either direction produces full ~940mbit/sec results. using the same iperf test through openvpn, from the client to the server produces ~80mbit. from the server to the client, ~900Kbit/sec. here is the server config:

port 1194
proto udp
dev tun

ca /etc/openvpn/ca.crt
cert /etc/openvpn/Test.crt
key /etc/openvpn/Test.key
dh /etc/openvpn/dh1024.pem

server 10.11.12.0 255.255.255.0
ifconfig-pool-persist ipp.txt

client-to-client
cipher none

user nobody
group nobody

persist-key
persist-tun

status openvpn-status.log

verb 5
reneg-sec 10800
mute-replay-warnings

here is client:

client
dev tun
dev-node OPENVPN
proto udp
port 1194

remote 172.16.16.91

resolv-retry infinite
nobind
persist-key
persist-tun

mute-replay-warnings


ca "Z:\\keys\\test\\ca.crt"
cert "Z:\\keys\\test\\test.crt"
key "Z:\\keys\\test\\test.key"
ns-cert-type server

cipher none

verb 4
reneg-sec 10800

as you can see, no ciphering, no tls-auth. and openvpn is still slow. CPU usage during a transfer never rises above 0.5%. tried lowering fragment in 100 increments down to 600 with absolutely no change in results. tcpdump traces during the abysmally slow upload seems to show that openvpn is only transmitting about 5-10 packets a second.... ?! every other piece of server software i've loaded onto this test machine has no bandwidth problems whatsoever.

openvpn startup output

Apr 14 17:38:54 SERVERNAME openvpn@server[842]: Current Parameter Settings:
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: config = '/etc/openvpn/server.conf'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: mode = 1
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: persist_config = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: persist_mode = 1
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: show_ciphers = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: show_digests = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: show_engines = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: genkey = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: key_pass_file = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: show_tls_ciphers = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: Connection profiles [default]:
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: proto = udp
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: local = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: local_port = 1193
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: remote = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: remote_port = 1193
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: remote_float = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: bind_defined = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: bind_local = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: connect_retry_seconds = 5
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: connect_timeout = 10
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: connect_retry_max = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: socks_proxy_server = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: socks_proxy_port = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: socks_proxy_retry = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: tun_mtu = 1500
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: tun_mtu_defined = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: link_mtu = 1500
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: link_mtu_defined = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: tun_mtu_extra = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: tun_mtu_extra_defined = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: mtu_discover_type = -1
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: fragment = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: mssfix = 1450
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: explicit_exit_notification = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: Connection profiles END
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: remote_random = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: ipchange = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: dev = 'tun'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: dev_type = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: dev_node = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: lladdr = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: topology = 1
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: tun_ipv6 = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: ifconfig_local = '10.11.12.1'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: ifconfig_remote_netmask = '10.11.12.2'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: ifconfig_noexec = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: ifconfig_nowarn = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: ifconfig_ipv6_local = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: ifconfig_ipv6_netbits = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: ifconfig_ipv6_remote = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: shaper = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: mtu_test = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: mlock = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: keepalive_ping = 20
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: keepalive_timeout = 3600
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: inactivity_timeout = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[842]: ping_send_timeout = 20
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ping_rec_timeout_action = 2
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ping_timer_remote = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remap_sigusr1 = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: persist_tun = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: persist_local_ip = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: persist_remote_ip = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: persist_key = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: passtos = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: resolve_retry_seconds = 1000000000
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: username = 'nobody'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: groupname = 'nobody'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: chroot_dir = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: cd_dir = '/etc/openvpn'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: writepid = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: up_script = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: down_script = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: down_pre = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: up_restart = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: up_delay = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: daemon = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: inetd = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: log = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: suppress_timestamps = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: nice = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: verbosity = 5
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: mute = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: gremlin = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: status_file = 'openvpn-status.log'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: status_file_version = 1
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: status_file_update_freq = 60
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: occ = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: rcvbuf = 65536
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: sndbuf = 65536
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: mark = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: sockflags = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: fast_io = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: lzo = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: route_script = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: route_default_gateway = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: route_default_metric = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: route_noexec = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: route_delay = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: route_delay_window = 30
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: route_delay_defined = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: route_nopull = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: route_gateway_via_dhcp = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: max_routes = 100
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: allow_pull_fqdn = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: route 10.11.12.0/255.255.255.0/nil/nil
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: management_addr = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: management_port = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: management_user_pass = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: management_log_history_cache = 250
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: management_echo_buffer_size = 100
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: management_write_peer_info_file = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: management_client_user = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: management_client_group = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: management_flags = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: shared_secret_file = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: key_direction = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ciphername_defined = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ciphername = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: authname_defined = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: authname = 'SHA1'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: prng_hash = 'SHA1'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: prng_nonce_secret_len = 16
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: keysize = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: engine = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: replay = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: mute_replay_warnings = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: replay_window = 64
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: replay_time = 15
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: packet_id_file = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: use_iv = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: test_crypto = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: tls_server = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: tls_client = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: key_method = 2
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ca_file = '/etc/openvpn/ca.crt'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ca_path = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: dh_file = '/etc/openvpn/dh1024.pem'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: cert_file = '/etc/openvpn/test.crt'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: priv_key_file = '/etc/openvpn/test.key'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: pkcs12_file = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: cipher_list = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: tls_verify = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: tls_export_cert = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: verify_x509_type = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: verify_x509_name = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: crl_file = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ns_cert_type = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_ku[i] = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: remote_cert_eku = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ssl_flags = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: tls_timeout = 2
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: renegotiate_bytes = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: renegotiate_packets = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: renegotiate_seconds = 10800
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: handshake_window = 60
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: transition_window = 3600
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: single_session = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: push_peer_info = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: tls_exit = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: tls_auth_file = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: server_network = 10.11.12.0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: server_netmask = 255.255.255.0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: server_network_ipv6 = ::
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: server_netbits_ipv6 = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: server_bridge_ip = 0.0.0.0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: server_bridge_netmask = 0.0.0.0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: server_bridge_pool_start = 0.0.0.0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: server_bridge_pool_end = 0.0.0.0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: push_entry = 'route 10.11.12.0 255.255.255.0'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: push_entry = 'topology net30'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: push_entry = 'ping 20'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: push_entry = 'ping-restart 3600'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ifconfig_pool_defined = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ifconfig_pool_start = 10.11.12.4
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ifconfig_pool_end = 10.11.12.251
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ifconfig_pool_netmask = 0.0.0.0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ifconfig_pool_persist_filename = 'ipp.txt'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ifconfig_pool_persist_refresh_freq = 600
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ifconfig_ipv6_pool_defined = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ifconfig_ipv6_pool_base = ::
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ifconfig_ipv6_pool_netbits = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: n_bcast_buf = 256
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: tcp_queue_limit = 64
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: real_hash_size = 256
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: virtual_hash_size = 256
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: client_connect_script = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: learn_address_script = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: client_disconnect_script = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: client_config_dir = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ccd_exclusive = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: tmp_dir = '/tmp'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: push_ifconfig_defined = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: push_ifconfig_local = 0.0.0.0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: push_ifconfig_remote_netmask = 0.0.0.0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: push_ifconfig_ipv6_defined = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: push_ifconfig_ipv6_local = ::/0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: push_ifconfig_ipv6_remote = ::
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: enable_c2c = ENABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: duplicate_cn = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: cf_max = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: cf_per = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: max_clients = 1024
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: max_routes_per_client = 256
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: auth_user_pass_verify_script = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: auth_user_pass_verify_script_via_file = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: port_share_host = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: port_share_port = 0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: client = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: pull = DISABLED
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: auth_user_pass_file = '[UNDEF]'
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: OpenVPN 2.3.3 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Apr  9 2014
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: Diffie-Hellman initialized with 1024 bit key
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: WARNING: file '/etc/openvpn/test.key' is group or others accessible
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ******* WARNING *******: null cipher specified, no encryption will be used
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: TLS-Auth MTU parms [ L:1525 D:138 EF:38 EB:0 ET:0 EL:0 ]
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: Socket Buffers: R=[163840->131072] S=[163840->131072]
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: ROUTE_GATEWAY 172.16.16.1/255.255.0.0 IFACE=eth0 HWADDR=00:0f:1f:e3:6f:c1
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: TUN/TAP device tun0 opened
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: TUN/TAP TX queue length set to 100
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: /usr/bin/ip link set dev tun0 up mtu 1500
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: /usr/bin/ip addr add dev tun0 local 10.11.12.1 peer 10.11.12.2
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: /usr/bin/ip route add 10.11.12.0/24 via 10.11.12.2
Apr 14 17:38:54 SERVERNAME openvpn@server[571]: Data Channel MTU parms [ L:1525 D:1450 EF:25 EB:4 ET:0 EL:0 AF:14/25 ]
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: GID set to nobody
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: UID set to nobody
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: UDPv4 link local (bound): [undef]
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: UDPv4 link remote: [undef]
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: MULTI: multi_init called, r=256 v=256
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: IFCONFIG POOL: base=10.11.12.4 size=62, ipv6=0
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: ifconfig_pool_read(), in=',10.11.12.4', TODO: IPv6
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: succeeded -> ifconfig_pool_set()
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: ifconfig_pool_read(), in=',10.11.12.8', TODO: IPv6
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: succeeded -> ifconfig_pool_set()
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: ifconfig_pool_read(), in=',10.11.12.12', TODO: IPv6
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: succeeded -> ifconfig_pool_set()
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: ifconfig_pool_read(), in=',10.11.12.16', TODO: IPv6
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: succeeded -> ifconfig_pool_set()
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: ifconfig_pool_read(), in=',10.11.12.20', TODO: IPv6
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: succeeded -> ifconfig_pool_set()
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: IFCONFIG POOL LIST
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: ,10.11.12.4
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: ,10.11.12.8
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: ,10.11.12.12
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: ,10.11.12.16
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: ,10.11.12.20
Apr 14 17:38:54 SERVERNAME openvpn@server[581]: Initialization Sequence Completed

does anyone have ANY idea why i'm getting such slow server uploads? iperf isn't the only thing that's slow, setting up a test ProFTPd server gives identitcally slow file transfers from the server to the client. i have tried this on 2 different machines, with both 1024 and 2048-bit DH.pem files. no change.

trainwreck

here is a tcpdump during an FTP transfer that never got past 75kbit/s

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tun0, link-type RAW (Raw IP), capture size 65535 bytes
17:46:02.544398 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.545033 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.545085 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.545106 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.545596 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.554382 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.554768 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.554811 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.555231 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.555273 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.555694 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.555727 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.556139 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.556172 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.556188 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.556649 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.556682 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.557096 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.564386 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.564841 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.564883 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.565305 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.771053 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.771625 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.771662 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.771678 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.772140 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.781041 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.781547 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.781590 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.782004 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.782044 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.782467 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.782500 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.782909 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.782941 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.782957 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.783415 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.783447 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.783860 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.791051 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.791487 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.791529 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.791948 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.997717 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.998234 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:02.998270 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.998286 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:02.998762 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.007713 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.008163 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.008203 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.008542 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.008581 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.008998 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.009030 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.009441 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.009473 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.009488 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.009956 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.009989 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.010413 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.017715 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.018156 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.018195 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.018550 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.224383 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.224870 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.224905 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.224921 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.225426 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.234373 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.234827 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.234869 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.235293 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.235332 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.235769 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.235804 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.236155 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.236187 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.236202 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.236684 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.236718 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.237151 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.244381 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.244829 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.244868 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.245296 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.451046 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.456704 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.456761 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.456781 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.457258 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.464387 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.464829 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.464872 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.465247 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.465290 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.465719 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.465752 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.466171 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.466203 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.466219 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.466679 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.466713 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.467086 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.474384 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.474875 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.474916 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.475283 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.681049 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.681455 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.681495 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.681514 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.682010 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.691045 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.691513 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.691559 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.691991 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.692031 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.692461 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.692495 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.692916 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.692949 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.692965 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.693389 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.693423 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.693725 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.701049 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.701494 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.701537 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.701965 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.907720 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.908170 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.908210 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.908226 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.908703 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.917710 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.918077 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.918118 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.918541 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.918582 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.919007 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.919040 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.919462 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.919494 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.919509 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.919978 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.920012 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.920435 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.927715 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.928170 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:03.928213 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:03.928645 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.134386 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.134829 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.134866 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.134884 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.135383 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.144377 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.144828 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.144871 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.145298 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.145338 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.145770 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.145803 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.146224 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.146256 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.146272 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.146723 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.146757 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.147182 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.154382 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.154753 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.154794 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.155221 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.361054 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.361585 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.361625 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.361643 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.362125 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.371044 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.371491 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.371534 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.371961 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.372002 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.372438 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.372472 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.372826 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.372861 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.372877 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.373339 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.373373 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.373789 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.381041 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.381501 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.381543 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.381974 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.587715 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.588208 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.588257 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.588277 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.588735 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.597712 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.598157 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.598200 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.598624 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.598665 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.599092 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.599127 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.599549 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.599582 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.599597 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.600060 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.600095 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.600548 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.607721 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.608196 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.608241 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.608668 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.814383 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.814881 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.814917 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.814935 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.815412 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.824375 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.824823 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.824865 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.825293 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.825331 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.825760 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.825792 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.826217 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.826250 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.826266 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.826643 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.826677 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.827102 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.834384 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.834861 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:04.834904 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:04.835340 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.041049 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.041505 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.041542 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.041560 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.042064 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.051046 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.051466 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.051505 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.051934 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.051975 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.052408 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.052441 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.052862 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.052894 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.052909 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.053391 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.053425 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.053860 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.061050 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.061501 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.061544 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.061975 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.267715 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.268214 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.268250 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.268266 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.268759 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.277710 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.278150 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.278192 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.278615 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.278656 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.279089 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.279122 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.279548 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.279581 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.279597 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.280103 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.280137 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.280568 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.287720 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.288193 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
17:46:05.288237 IP 10.10.10.1.48549 > 10.10.10.6.62177: tcp 1385
17:46:05.288680 IP 10.10.10.6.62177 > 10.10.10.1.48549: tcp 0
^C
286 packets captured
374 packets received by filter
0 packets dropped by kernel

here is the server connection log

Tue Apr 15 17:41:42 2014 us=665277 172.16.16.10:59164 Re-using SSL/TLS context
Tue Apr 15 17:41:42 2014 us=665889 172.16.16.10:59164 Control Channel MTU parms [ L:1525 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Apr 15 17:41:42 2014 us=666194 172.16.16.10:59164 Data Channel MTU parms [ L:1525 D:1450 EF:25 EB:4 ET:0 EL:0 AF:14/25 ]
Tue Apr 15 17:41:42 2014 us=666450 172.16.16.10:59164 Local Options String: 'V4,dev-type tun,link-mtu 1525,tun-mtu 1500,proto UDPv4,cipher [null-cipher],auth SHA1,keysize 0,key-method 2,tls-server'
Tue Apr 15 17:41:42 2014 us=666608 172.16.16.10:59164 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1525,tun-mtu 1500,proto UDPv4,cipher [null-cipher],auth SHA1,keysize 0,key-method 2,tls-client'
Tue Apr 15 17:41:42 2014 us=666817 172.16.16.10:59164 Local Options hash (VER=V4): 'b011a369'
Tue Apr 15 17:41:42 2014 us=666976 172.16.16.10:59164 Expected Remote Options hash (VER=V4): 'c0c6b1e1'
Tue Apr 15 17:41:42 2014 us=667238 172.16.16.10:59164 TLS: Initial packet from [AF_INET]172.16.16.10:59164, sid=88d678d5 fcb81704
Tue Apr 15 17:41:42 2014 us=711814 172.16.16.10:59164 VERIFY OK: depth=1, C=US, ST=TN, L=TestVille, O=TestORG, CN=TESTCA, name=TESTCA, emailAddress=me@myhost.mydomain
Tue Apr 15 17:41:42 2014 us=712642 172.16.16.10:59164 VERIFY OK: depth=0, C=US, ST=TN, L=TestVille, O=TestORG, CN=TESTCLIENT, name=TESTCLIENT, emailAddress=me@myhost.mydomain
Tue Apr 15 17:41:42 2014 us=733381 172.16.16.10:59164 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Apr 15 17:41:42 2014 us=733709 172.16.16.10:59164 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Apr 15 17:41:42 2014 us=734650 172.16.16.10:59164 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Apr 15 17:41:42 2014 us=734957 172.16.16.10:59164 [TESTCLIENT] Peer Connection Initiated with [AF_INET]172.16.16.10:59164
Tue Apr 15 17:41:42 2014 us=735161 TESTCLIENT/172.16.16.10:59164 MULTI_sva: pool returned IPv4=10.10.10.6, IPv6=(Not enabled)
Tue Apr 15 17:41:42 2014 us=735455 TESTCLIENT/172.16.16.10:59164 MULTI: Learn: 10.10.10.6 -> TESTCLIENT/172.16.16.10:59164
Tue Apr 15 17:41:42 2014 us=735612 TESTCLIENT/172.16.16.10:59164 MULTI: primary virtual IP for TESTCLIENT/172.16.16.10:59164: 10.10.10.6
Tue Apr 15 17:41:44 2014 us=724949 TESTCLIENT/172.16.16.10:59164 PUSH: Received control message: 'PUSH_REQUEST'
Tue Apr 15 17:41:44 2014 us=725042 TESTCLIENT/172.16.16.10:59164 send_push_reply(): safe_cap=940
Tue Apr 15 17:41:44 2014 us=725124 TESTCLIENT/172.16.16.10:59164 SENT CONTROL [TESTCLIENT]: 'PUSH_REPLY,route 10.10.10.1,topology net30,ping 30,ping-restart 150,ifconfig 10.10.10.6 10.10.10.5' (status=1)

here is the client connection log

Tue Apr 15 17:41:29 2014 us=945409 OpenVPN 2.3.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Apr 14 2014
Tue Apr 15 17:41:30 2014 us=15409 ******* WARNING *******: null cipher specified, no encryption will be used
Tue Apr 15 17:41:30 2014 us=15409 Control Channel MTU parms [ L:1525 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue Apr 15 17:41:30 2014 us=15409 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Apr 15 17:41:30 2014 us=15409 Data Channel MTU parms [ L:1525 D:1450 EF:25 EB:4 ET:0 EL:0 AF:14/25 ]
Tue Apr 15 17:41:30 2014 us=15409 Local Options String: 'V4,dev-type tun,link-mtu 1525,tun-mtu 1500,proto UDPv4,cipher [null-cipher],auth SHA1,keysize 0,key-met
hod 2,tls-client'
Tue Apr 15 17:41:30 2014 us=15409 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1525,tun-mtu 1500,proto UDPv4,cipher [null-cipher],auth SHA1,keysize
 0,key-method 2,tls-server'
Tue Apr 15 17:41:30 2014 us=15409 Local Options hash (VER=V4): 'c0c6b1e1'
Tue Apr 15 17:41:30 2014 us=15409 Expected Remote Options hash (VER=V4): 'b011a369'
Tue Apr 15 17:41:30 2014 us=15409 UDPv4 link local: [undef]
Tue Apr 15 17:41:30 2014 us=15409 UDPv4 link remote: [AF_INET]172.16.16.5:1194
Tue Apr 15 17:41:30 2014 us=15409 TLS: Initial packet from [AF_INET]172.16.16.5:1194, sid=3cffcb22 8e3ab3e1
Tue Apr 15 17:41:30 2014 us=45409 VERIFY OK: depth=1, C=US, ST=TN, L=TestVille, O=TestORG, CN=TESTCA, name=TESTCA, emailAddress=me@myhost.mydomain
Tue Apr 15 17:41:30 2014 us=45409 VERIFY OK: nsCertType=SERVER
Tue Apr 15 17:41:30 2014 us=45409 VERIFY OK: depth=0, C=US, ST=TN, L=TestVille, O=TestORG, CN=TESTSERVER, name=TESTSERVER, emailAddress=me@myhost.mydomain
Tue Apr 15 17:41:30 2014 us=85409 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Apr 15 17:41:30 2014 us=85409 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue Apr 15 17:41:30 2014 us=85409 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Tue Apr 15 17:41:30 2014 us=85409 [TESTSERVER] Peer Connection Initiated with [AF_INET]172.16.16.5:1194
Tue Apr 15 17:41:32 2014 us=75412 SENT CONTROL [TESTSERVER]: 'PUSH_REQUEST' (status=1)
Tue Apr 15 17:41:32 2014 us=75412 PUSH: Received control message: 'PUSH_REPLY,route 10.10.10.1,topology net30,ping 30,ping-restart 150,ifconfig 10.10.10.6 10.10
.10.5'
Tue Apr 15 17:41:32 2014 us=75412 OPTIONS IMPORT: timers and/or timeouts modified
Tue Apr 15 17:41:32 2014 us=75412 OPTIONS IMPORT: --ifconfig/up options modified
Tue Apr 15 17:41:32 2014 us=75412 OPTIONS IMPORT: route options modified
Tue Apr 15 17:41:32 2014 us=75412 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Apr 15 17:41:32 2014 us=75412 open_tun, tt->ipv6=0
Tue Apr 15 17:41:32 2014 us=75412 TAP-WIN32 device [OPENVPN] opened: \\.\Global\{ADB8F5AE-1687-41BC-85F7-6185569ADCB8}.tap
Tue Apr 15 17:41:32 2014 us=75412 TAP-Windows Driver Version 9.9
Tue Apr 15 17:41:32 2014 us=75412 TAP-Windows MTU=1500
Tue Apr 15 17:41:32 2014 us=75412 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.10.10.6/255.255.255.252 on interface {ADB8F5AE-1687-41BC-85F7-61855
69ADCB8} [DHCP-serv: 10.10.10.5, lease-time: 31536000]
Tue Apr 15 17:41:32 2014 us=75412 Successful ARP Flush on interface [20] {ADB8F5AE-1687-41BC-85F7-6185569ADCB8}
Tue Apr 15 17:41:37 2014 us=105419 TEST ROUTES: 1/1 succeeded len=1 ret=1 a=0 u/d=up
Tue Apr 15 17:41:37 2014 us=105419 C:\Windows\system32\route.exe ADD 10.10.10.1 MASK 255.255.255.255 10.10.10.5
Tue Apr 15 17:41:37 2014 us=105419 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Tue Apr 15 17:41:37 2014 us=105419 Route addition via IPAPI succeeded [adaptive]
Tue Apr 15 17:41:37 2014 us=105419 Initialization Sequence Completed

i'm seriously trying to give you guys everything i can here

trainwreck

so i've confirmed it's just a Windows client issue; Linux clients are able to get full bandwidth.

trainwreck

an iperf from the server to the client - only transfers 640 kilobytes of data in 30 seconds

------------------------------------------------------------
Client connecting to 10.10.10.6, TCP port 5001
TCP window size:  416 KByte
------------------------------------------------------------
[  3] local 10.10.10.1 port 35833 connected with 10.10.10.6 port 5001
[ ID] Interval       Transfer     Bandwidth
[  3]  0.0-29.5 sec   640 KBytes   178 Kbits/sec

the same iperf without openvpn

------------------------------------------------------------
Client connecting to 172.16.16.1, TCP port 5001
TCP window size:  416 KByte
------------------------------------------------------------
[  3] local 172.16.16.5 port 45580 connected with 172.16.16.1 port 5001
[ ID] Interval       Transfer     Bandwidth
[  3]  0.0-10.0 sec  1.09 GBytes   940 Mbits/sec

trainwreck

wget stalling trying to retrieve test FTP file. only downloads 64 kilobytes

C:\Users>wget ftp://10.10.10.1/test.mp4
--2014-04-16 15:26:48--  ftp://10.10.10.1/test.mp4
           => `test.mp4'
Connecting to 10.10.10.1:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD not needed.
==> SIZE test.mp4 ... 448252124
==> PASV ... done.    ==> RETR test.mp4 ... done.
Length: 448252124 (427M)

 0% [                                                                                                                       ] 64,962      --.-K/s  eta 38h 33m

trainwreck

tried using TCP instead of UDP. no change.

trainwreck

recompiled openvpn from scratch on the server, and tried going back to version 2.2.2 on win7. still slow.

trainwreck

took the identitcal configuration of the Arch linux openvpn server config, and ran it on Windows. from win7 server to win7 client = full speed! (~37mbit). so it is a apparently a crossing-platform problem.

------------------------------------------------------------
Client connecting to 10.10.10.6, TCP port 5001
TCP window size:  416 KByte
------------------------------------------------------------
[156] local 10.10.10.1 port 7760 connected with 10.10.10.6 port 5001
[ ID] Interval       Transfer     Bandwidth
[156]  0.0-10.0 sec  45.2 MBytes  37.7 Mbits/sec

trainwreck

a more detailed iperf from Linux server to win client. as you can see, there is a burst of traffic initially, then nothing for ~4 seconds, then a trickling ~948kbps stream for the rest of the duration.

------------------------------------------------------------
Client connecting to 10.10.10.6, TCP port 5001
TCP window size:  416 KByte
------------------------------------------------------------
[  3] local 10.10.10.1 port 40643 connected with 10.10.10.6 port 5001
[ ID] Interval       Transfer     Bandwidth
[  3]  0.0- 2.0 sec   512 KBytes  2.10 Mbits/sec
[  3]  2.0- 4.0 sec  0.00 Bytes  0.00 bits/sec
[  3]  4.0- 6.0 sec  0.00 Bytes  0.00 bits/sec
[  3]  6.0- 8.0 sec  0.00 Bytes  0.00 bits/sec
[  3]  8.0-10.0 sec   128 KBytes   524 Kbits/sec
[  3] 10.0-12.0 sec   128 KBytes   524 Kbits/sec
[  3] 12.0-14.0 sec   512 KBytes  2.10 Mbits/sec
[  3] 14.0-16.0 sec   128 KBytes   524 Kbits/sec
[  3] 16.0-18.0 sec   512 KBytes  2.10 Mbits/sec
[  3] 18.0-20.0 sec   128 KBytes   524 Kbits/sec
[  3] 20.0-22.0 sec   384 KBytes  1.57 Mbits/sec
[  3] 22.0-24.0 sec   256 KBytes  1.05 Mbits/sec
[  3] 24.0-26.0 sec   512 KBytes  2.10 Mbits/sec
[  3] 26.0-28.0 sec   384 KBytes  1.57 Mbits/sec
[  3] 28.0-30.0 sec   256 KBytes  1.05 Mbits/sec
[  3] 30.0-32.0 sec   128 KBytes   524 Kbits/sec
[  3] 32.0-34.0 sec   640 KBytes  2.62 Mbits/sec
[  3] 34.0-36.0 sec   384 KBytes  1.57 Mbits/sec
[  3] 36.0-38.0 sec   384 KBytes  1.57 Mbits/sec
[  3] 38.0-40.0 sec   384 KBytes  1.57 Mbits/sec
[  3] 40.0-42.0 sec   128 KBytes   524 Kbits/sec
[  3] 42.0-44.0 sec   128 KBytes   524 Kbits/sec
[  3] 44.0-46.0 sec   128 KBytes   524 Kbits/sec
[  3] 46.0-48.0 sec   128 KBytes   524 Kbits/sec
[  3] 48.0-50.0 sec   256 KBytes  1.05 Mbits/sec
[  3] 50.0-52.0 sec   128 KBytes   524 Kbits/sec
[  3] 52.0-54.0 sec   128 KBytes   524 Kbits/sec
[  3] 54.0-56.0 sec   128 KBytes   524 Kbits/sec
[  3] 56.0-58.0 sec   128 KBytes   524 Kbits/sec
[  3] 58.0-60.0 sec   128 KBytes   524 Kbits/sec
[  3]  0.0-63.1 sec  7.12 MBytes   948 Kbits/sec

albertnguyen

I'm also facing low speed problem on a cross-platform system (Arch Linux server and Win7 client).

Have a look at my thread: https://forums.openvpn.net/topic15640.html

Do you see a lot of TCP Retransmissions in your packet captures?