Request for help: slow vpn speeds

fidesachates

Hi,

I'm requesting for some help with my open vpn setup. I used https://github.com/jlund/streisand to set up an openvpn server on an aws instance on a t2.micro instance. I have a pfsense router that has an openvpn client to connect to the server.

All the routing works and I can access everything I expect. My problem is that the speed is more of a degrade than I expected. My speeds without the vpn is 100/100, but when the vpn is connected, I get 30-60/90 Mbps. The upload speed is acceptable, but I'm confused why the download is degraded by 50%.

* I've tried udp and tcp and neither reached desired speeds to come close to my native speed of 100 / 100 Mbps.
* I checked the cpu on both client and server during the speed tests and they never go above 20%. I do notice that on upload when the speeds reach 90, the cpu usage hits 20% on the server, but on the download it doesn't go beyond 7%.
* Server is running version 2.4.1 and client is 2.3.14

Can anyone help or point me in the right direction?

* Server *
Operating System:

Linux ip 4.4.0-1016-aws #25-Ubuntu SMP Thu Apr 20 11:34:35 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux

Network setup:

root@ip-172-31-78-191:/etc/openvpn# ifconfig
eth0      Link encap:Ethernet  HWaddr 12:25:eb:b2:33:d2  
          inet addr:a.a.a.a  Bcast: --.--.--.--  Mask:255.255.240.0
          inet6 addr: -------------------/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:9001  Metric:1
          RX packets:51799374 errors:0 dropped:0 overruns:0 frame:0
          TX packets:38165205 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:43153913998 (43.1 GB)  TX bytes:40198595587 (40.1 GB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:1547653 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1547653 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1 
          RX bytes:192421175 (192.4 MB)  TX bytes:192421175 (192.4 MB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:10.9.0.1  P-t-P:10.9.0.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:282061 errors:0 dropped:0 overruns:0 frame:0
          TX packets:254763 errors:0 dropped:95 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:331768482 (331.7 MB)  TX bytes:172829081 (172.8 MB)

tun1      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:10.8.0.1  P-t-P:10.8.0.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:90219 errors:0 dropped:0 overruns:0 frame:0
          TX packets:118693 errors:0 dropped:140 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:74794781 (74.7 MB)  TX bytes:111835569 (111.8 MB)

wg0-server Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:10.192.122.1  P-t-P:10.192.122.1  Mask:255.255.255.0
          UP POINTOPOINT RUNNING NOARP  MTU:8941  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

Conf: server 10.9.0.0 255.255.255.0
push "dhcp-option DNS 10.9.0.1"
proto udp
port 8757
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh /etc/ssl/dhparams.pem
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"

# Fix for the Windows 10 DNS leak described here:
# https://community.openvpn.net/openvpn/ticket/605
push block-outside-dns

client-to-client
remote-cert-tls client
duplicate-cn
keepalive 1800 3600
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC
ncp-ciphers AES-256-GCM:AES-128-GCM
auth SHA256
tls-version-min 1.2
compress lzo
user nobody
group nogroup
persist-key
persist-tun
verb 4

log-append /var/log/openvpn-udp.log log:

Sun May  7 00:37:42 2017 us=451130 Current Parameter Settings:
Sun May  7 00:37:42 2017 us=451210   config = '/etc/openvpn/server-udp.conf'
Sun May  7 00:37:42 2017 us=451226   mode = 1
Sun May  7 00:37:42 2017 us=451234   persist_config = DISABLED
Sun May  7 00:37:42 2017 us=451239   persist_mode = 1
Sun May  7 00:37:42 2017 us=451244   show_ciphers = DISABLED
Sun May  7 00:37:42 2017 us=451249   show_digests = DISABLED
Sun May  7 00:37:42 2017 us=451253   show_engines = DISABLED
Sun May  7 00:37:42 2017 us=451258   genkey = DISABLED
Sun May  7 00:37:42 2017 us=451263   key_pass_file = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451267   show_tls_ciphers = DISABLED
Sun May  7 00:37:42 2017 us=451272   connect_retry_max = 0
Sun May  7 00:37:42 2017 us=451277 Connection profiles [0]:
Sun May  7 00:37:42 2017 us=451283   proto = udp
Sun May  7 00:37:42 2017 us=451288   local = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451293   local_port = '8757'
Sun May  7 00:37:42 2017 us=451297   remote = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451302   remote_port = '8757'
Sun May  7 00:37:42 2017 us=451306   remote_float = DISABLED
Sun May  7 00:37:42 2017 us=451311   bind_defined = DISABLED
Sun May  7 00:37:42 2017 us=451316   bind_local = ENABLED
Sun May  7 00:37:42 2017 us=451321   bind_ipv6_only = DISABLED
Sun May  7 00:37:42 2017 us=451325   connect_retry_seconds = 5
Sun May  7 00:37:42 2017 us=451330   connect_timeout = 120
Sun May  7 00:37:42 2017 us=451335   socks_proxy_server = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451340   socks_proxy_port = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451344   tun_mtu = 1500
Sun May  7 00:37:42 2017 us=451349   tun_mtu_defined = ENABLED
Sun May  7 00:37:42 2017 us=451354   link_mtu = 1500
Sun May  7 00:37:42 2017 us=451358   link_mtu_defined = DISABLED
Sun May  7 00:37:42 2017 us=451363   tun_mtu_extra = 0
Sun May  7 00:37:42 2017 us=451368   tun_mtu_extra_defined = DISABLED
Sun May  7 00:37:42 2017 us=451372   mtu_discover_type = -1
Sun May  7 00:37:42 2017 us=451377   fragment = 0
Sun May  7 00:37:42 2017 us=451381   mssfix = 1450
Sun May  7 00:37:42 2017 us=451386   explicit_exit_notification = 0
Sun May  7 00:37:42 2017 us=451391 Connection profiles END
Sun May  7 00:37:42 2017 us=451395   remote_random = DISABLED
Sun May  7 00:37:42 2017 us=451400   ipchange = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451405   dev = 'tun'
Sun May  7 00:37:42 2017 us=451409   dev_type = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451414   dev_node = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451419   lladdr = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451423   topology = 1
Sun May  7 00:37:42 2017 us=451428   ifconfig_local = '10.9.0.1'
Sun May  7 00:37:42 2017 us=451433   ifconfig_remote_netmask = '10.9.0.2'
Sun May  7 00:37:42 2017 us=451437   ifconfig_noexec = DISABLED
Sun May  7 00:37:42 2017 us=451442   ifconfig_nowarn = DISABLED
Sun May  7 00:37:42 2017 us=451446   ifconfig_ipv6_local = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451451   ifconfig_ipv6_netbits = 0
Sun May  7 00:37:42 2017 us=451456   ifconfig_ipv6_remote = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451460   shaper = 0
Sun May  7 00:37:42 2017 us=451465   mtu_test = 0
Sun May  7 00:37:42 2017 us=451469   mlock = DISABLED
Sun May  7 00:37:42 2017 us=451474   keepalive_ping = 1800
Sun May  7 00:37:42 2017 us=451479   keepalive_timeout = 3600
Sun May  7 00:37:42 2017 us=451483   inactivity_timeout = 0
Sun May  7 00:37:42 2017 us=451488   ping_send_timeout = 1800
Sun May  7 00:37:42 2017 us=451492   ping_rec_timeout = 7200
Sun May  7 00:37:42 2017 us=451497   ping_rec_timeout_action = 2
Sun May  7 00:37:42 2017 us=451502   ping_timer_remote = DISABLED
Sun May  7 00:37:42 2017 us=451507   remap_sigusr1 = 0
Sun May  7 00:37:42 2017 us=451519   persist_tun = ENABLED
Sun May  7 00:37:42 2017 us=451524   persist_local_ip = DISABLED
Sun May  7 00:37:42 2017 us=451529   persist_remote_ip = DISABLED
Sun May  7 00:37:42 2017 us=451533   persist_key = ENABLED
Sun May  7 00:37:42 2017 us=451537   passtos = DISABLED
Sun May  7 00:37:42 2017 us=451542   resolve_retry_seconds = 1000000000
Sun May  7 00:37:42 2017 us=451546   resolve_in_advance = DISABLED
Sun May  7 00:37:42 2017 us=451551   username = 'nobody'
Sun May  7 00:37:42 2017 us=451555   groupname = 'nogroup'
Sun May  7 00:37:42 2017 us=451560   chroot_dir = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451564   cd_dir = '/etc/openvpn'
Sun May  7 00:37:42 2017 us=451568   writepid = '/run/openvpn/server-udp.pid'
Sun May  7 00:37:42 2017 us=451573   up_script = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451577   down_script = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451582   down_pre = DISABLED
Sun May  7 00:37:42 2017 us=451586   up_restart = DISABLED
Sun May  7 00:37:42 2017 us=451590   up_delay = DISABLED
Sun May  7 00:37:42 2017 us=451595   daemon = ENABLED
Sun May  7 00:37:42 2017 us=451599   inetd = 0
Sun May  7 00:37:42 2017 us=451604   log = ENABLED
Sun May  7 00:37:42 2017 us=451608   suppress_timestamps = DISABLED
Sun May  7 00:37:42 2017 us=451612   machine_readable_output = DISABLED
Sun May  7 00:37:42 2017 us=451617   nice = 0
Sun May  7 00:37:42 2017 us=451621   verbosity = 4
Sun May  7 00:37:42 2017 us=451626   mute = 0
Sun May  7 00:37:42 2017 us=451630   gremlin = 0
Sun May  7 00:37:42 2017 us=451634   status_file = '/run/openvpn/server-udp.status'
Sun May  7 00:37:42 2017 us=451639   status_file_version = 1
Sun May  7 00:37:42 2017 us=451643   status_file_update_freq = 10
Sun May  7 00:37:42 2017 us=451648   occ = ENABLED
Sun May  7 00:37:42 2017 us=451652   rcvbuf = 0
Sun May  7 00:37:42 2017 us=451656   sndbuf = 0
Sun May  7 00:37:42 2017 us=451660   mark = 0
Sun May  7 00:37:42 2017 us=451665   sockflags = 0
Sun May  7 00:37:42 2017 us=451669   fast_io = DISABLED
Sun May  7 00:37:42 2017 us=451674   comp.alg = 2
Sun May  7 00:37:42 2017 us=451678   comp.flags = 0
Sun May  7 00:37:42 2017 us=451682   route_script = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451687   route_default_gateway = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451692   route_default_metric = 0
Sun May  7 00:37:42 2017 us=451696   route_noexec = DISABLED
Sun May  7 00:37:42 2017 us=451701   route_delay = 0
Sun May  7 00:37:42 2017 us=451705   route_delay_window = 30
Sun May  7 00:37:42 2017 us=451710   route_delay_defined = DISABLED
Sun May  7 00:37:42 2017 us=451714   route_nopull = DISABLED
Sun May  7 00:37:42 2017 us=451719   route_gateway_via_dhcp = DISABLED
Sun May  7 00:37:42 2017 us=451723   allow_pull_fqdn = DISABLED
Sun May  7 00:37:42 2017 us=451729   route 10.9.0.0/255.255.255.0/default (not set)/default (not set)
Sun May  7 00:37:42 2017 us=451733   management_addr = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451738   management_port = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451742   management_user_pass = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451747   management_log_history_cache = 250
Sun May  7 00:37:42 2017 us=451751   management_echo_buffer_size = 100
Sun May  7 00:37:42 2017 us=451756   management_write_peer_info_file = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451760   management_client_user = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451765   management_client_group = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451769   management_flags = 0
Sun May  7 00:37:42 2017 us=451774   shared_secret_file = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451778   key_direction = 1
Sun May  7 00:37:42 2017 us=451783   ciphername = 'AES-256-CBC'
Sun May  7 00:37:42 2017 us=451787   ncp_enabled = ENABLED
Sun May  7 00:37:42 2017 us=451792   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sun May  7 00:37:42 2017 us=451797   authname = 'SHA256'
Sun May  7 00:37:42 2017 us=451801   prng_hash = 'SHA1'
Sun May  7 00:37:42 2017 us=451806   prng_nonce_secret_len = 16
Sun May  7 00:37:42 2017 us=451810   keysize = 0
Sun May  7 00:37:42 2017 us=451815   engine = DISABLED
Sun May  7 00:37:42 2017 us=451822   replay = ENABLED
Sun May  7 00:37:42 2017 us=451827   mute_replay_warnings = DISABLED
Sun May  7 00:37:42 2017 us=451831   replay_window = 64
Sun May  7 00:37:42 2017 us=451836   replay_time = 15
Sun May  7 00:37:42 2017 us=451840   packet_id_file = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451845   use_iv = ENABLED
Sun May  7 00:37:42 2017 us=451849   test_crypto = DISABLED
Sun May  7 00:37:42 2017 us=451854   tls_server = ENABLED
Sun May  7 00:37:42 2017 us=451858   tls_client = DISABLED
Sun May  7 00:37:42 2017 us=451863   key_method = 2
Sun May  7 00:37:42 2017 us=451867   ca_file = 'ca.crt'
Sun May  7 00:37:42 2017 us=451871   ca_path = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451876   dh_file = '/etc/ssl/dhparams.pem'
Sun May  7 00:37:42 2017 us=451880   cert_file = 'server.crt'
Sun May  7 00:37:42 2017 us=451885   extra_certs_file = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451890   priv_key_file = 'server.key'
Sun May  7 00:37:42 2017 us=451894   pkcs12_file = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451899   cipher_list = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451903   tls_verify = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451907   tls_export_cert = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451912   verify_x509_type = 0
Sun May  7 00:37:42 2017 us=451916   verify_x509_name = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451921   crl_file = '[UNDEF]'
Sun May  7 00:37:42 2017 us=451925   ns_cert_type = 0
Sun May  7 00:37:42 2017 us=451930   remote_cert_ku[i] = 65535
Sun May  7 00:37:42 2017 us=451934   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451939   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451943   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451947   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451952   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451956   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451961   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451965   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451970   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451974   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451979   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451983   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451987   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451991   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=451996   remote_cert_ku[i] = 0
Sun May  7 00:37:42 2017 us=452001   remote_cert_eku = 'TLS Web Client Authentication'
Sun May  7 00:37:42 2017 us=452005   ssl_flags = 192
Sun May  7 00:37:42 2017 us=452010   tls_timeout = 2
Sun May  7 00:37:42 2017 us=452014   renegotiate_bytes = -1
Sun May  7 00:37:42 2017 us=452019   renegotiate_packets = 0
Sun May  7 00:37:42 2017 us=452023   renegotiate_seconds = 3600
Sun May  7 00:37:42 2017 us=452028   handshake_window = 60
Sun May  7 00:37:42 2017 us=452032   transition_window = 3600
Sun May  7 00:37:42 2017 us=452037   single_session = DISABLED
Sun May  7 00:37:42 2017 us=452041   push_peer_info = DISABLED
Sun May  7 00:37:42 2017 us=452046   tls_exit = DISABLED
Sun May  7 00:37:42 2017 us=452050   tls_auth_file = 'ta.key'
Sun May  7 00:37:42 2017 us=452055   tls_crypt_file = '[UNDEF]'
Sun May  7 00:37:42 2017 us=452059   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452064   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452068   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452073   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452077   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452082   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452086   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452090   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452095   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452099   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452104   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452110   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452115   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452119   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452124   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452128   pkcs11_protected_authentication = DISABLED
Sun May  7 00:37:42 2017 us=452133   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452137   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452142   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452146   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452150   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452155   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452159   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452163   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452167   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452172   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452176   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452180   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452185   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452189   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452193   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452203   pkcs11_private_mode = 00000000
Sun May  7 00:37:42 2017 us=452208   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452212   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452216   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452221   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452225   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452229   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452234   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452238   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452242   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452247   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452251   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452255   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452260   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452264   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452268   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452273   pkcs11_cert_private = DISABLED
Sun May  7 00:37:42 2017 us=452277   pkcs11_pin_cache_period = -1
Sun May  7 00:37:42 2017 us=452282   pkcs11_id = '[UNDEF]'
Sun May  7 00:37:42 2017 us=452286   pkcs11_id_management = DISABLED
Sun May  7 00:37:42 2017 us=452292   server_network = 10.9.0.0
Sun May  7 00:37:42 2017 us=452297   server_netmask = 255.255.255.0
Sun May  7 00:37:42 2017 us=452305   server_network_ipv6 = ::
Sun May  7 00:37:42 2017 us=452310   server_netbits_ipv6 = 0
Sun May  7 00:37:42 2017 us=452315   server_bridge_ip = 0.0.0.0
Sun May  7 00:37:42 2017 us=452320   server_bridge_netmask = 0.0.0.0
Sun May  7 00:37:42 2017 us=452325   server_bridge_pool_start = 0.0.0.0
Sun May  7 00:37:42 2017 us=452330   server_bridge_pool_end = 0.0.0.0
Sun May  7 00:37:42 2017 us=452335   push_entry = 'dhcp-option DNS 10.9.0.1'
Sun May  7 00:37:42 2017 us=452339   push_entry = 'redirect-gateway def1'
Sun May  7 00:37:42 2017 us=452344   push_entry = 'block-outside-dns'
Sun May  7 00:37:42 2017 us=452349   push_entry = 'route 10.9.0.0 255.255.255.0'
Sun May  7 00:37:42 2017 us=452353   push_entry = 'topology net30'
Sun May  7 00:37:42 2017 us=452358   push_entry = 'ping 1800'
Sun May  7 00:37:42 2017 us=452362   push_entry = 'ping-restart 3600'
Sun May  7 00:37:42 2017 us=452367   ifconfig_pool_defined = ENABLED
Sun May  7 00:37:42 2017 us=452372   ifconfig_pool_start = 10.9.0.4
Sun May  7 00:37:42 2017 us=452377   ifconfig_pool_end = 10.9.0.251
Sun May  7 00:37:42 2017 us=452382   ifconfig_pool_netmask = 0.0.0.0
Sun May  7 00:37:42 2017 us=452389   ifconfig_pool_persist_filename = 'ipp.txt'
Sun May  7 00:37:42 2017 us=452394   ifconfig_pool_persist_refresh_freq = 600
Sun May  7 00:37:42 2017 us=452398   ifconfig_ipv6_pool_defined = DISABLED
Sun May  7 00:37:42 2017 us=452403   ifconfig_ipv6_pool_base = ::
Sun May  7 00:37:42 2017 us=452408   ifconfig_ipv6_pool_netbits = 0
Sun May  7 00:37:42 2017 us=452412   n_bcast_buf = 256
Sun May  7 00:37:42 2017 us=452417   tcp_queue_limit = 64
Sun May  7 00:37:42 2017 us=452421   real_hash_size = 256
Sun May  7 00:37:42 2017 us=452426   virtual_hash_size = 256
Sun May  7 00:37:42 2017 us=452430   client_connect_script = '[UNDEF]'
Sun May  7 00:37:42 2017 us=452435   learn_address_script = '[UNDEF]'
Sun May  7 00:37:42 2017 us=452440   client_disconnect_script = '[UNDEF]'
Sun May  7 00:37:42 2017 us=452444   client_config_dir = '[UNDEF]'
Sun May  7 00:37:42 2017 us=452449   ccd_exclusive = DISABLED
Sun May  7 00:37:42 2017 us=452453   tmp_dir = '/tmp'
Sun May  7 00:37:42 2017 us=452457   push_ifconfig_defined = DISABLED
Sun May  7 00:37:42 2017 us=452462   push_ifconfig_local = 0.0.0.0
Sun May  7 00:37:42 2017 us=452467   push_ifconfig_remote_netmask = 0.0.0.0
Sun May  7 00:37:42 2017 us=452472   push_ifconfig_ipv6_defined = DISABLED
Sun May  7 00:37:42 2017 us=452477   push_ifconfig_ipv6_local = ::/0
Sun May  7 00:37:42 2017 us=452482   push_ifconfig_ipv6_remote = ::
Sun May  7 00:37:42 2017 us=452486   enable_c2c = ENABLED
Sun May  7 00:37:42 2017 us=452491   duplicate_cn = ENABLED
Sun May  7 00:37:42 2017 us=452495   cf_max = 0
Sun May  7 00:37:42 2017 us=452500   cf_per = 0
Sun May  7 00:37:42 2017 us=452504   max_clients = 1024
Sun May  7 00:37:42 2017 us=452509   max_routes_per_client = 256
Sun May  7 00:37:42 2017 us=452514   auth_user_pass_verify_script = '[UNDEF]'
Sun May  7 00:37:42 2017 us=452518   auth_user_pass_verify_script_via_file = DISABLED
Sun May  7 00:37:42 2017 us=452523   auth_token_generate = DISABLED
Sun May  7 00:37:42 2017 us=452527   auth_token_lifetime = 0
Sun May  7 00:37:42 2017 us=452532   port_share_host = '[UNDEF]'
Sun May  7 00:37:42 2017 us=452537   port_share_port = '[UNDEF]'
Sun May  7 00:37:42 2017 us=452541   client = DISABLED
Sun May  7 00:37:42 2017 us=452546   pull = DISABLED
Sun May  7 00:37:42 2017 us=452550   auth_user_pass_file = '[UNDEF]'
Sun May  7 00:37:42 2017 us=452556 OpenVPN 2.4.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Mar 22 2017
Sun May  7 00:37:42 2017 us=452565 library versions: OpenSSL 1.0.2g  1 Mar 2016, LZO 2.08
Sun May  7 00:37:42 2017 us=457351 WARNING: --ifconfig-pool-persist will not work with --duplicate-cn
Sun May  7 00:37:42 2017 us=462940 Diffie-Hellman initialized with 2048 bit key
Sun May  7 00:37:42 2017 us=463269 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun May  7 00:37:42 2017 us=463288 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun May  7 00:37:42 2017 us=463299 TLS-Auth MTU parms [ L:1622 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Sun May  7 00:37:42 2017 us=463429 ROUTE_GATEWAY 172.31.64.1/255.255.240.0 IFACE=eth0 HWADDR=12:25:eb:b2:33:d2
Sun May  7 00:37:42 2017 us=464486 TUN/TAP device tun0 opened
Sun May  7 00:37:42 2017 us=464509 TUN/TAP TX queue length set to 100
Sun May  7 00:37:42 2017 us=464521 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sun May  7 00:37:42 2017 us=464534 /sbin/ip link set dev tun0 up mtu 1500
Sun May  7 00:37:42 2017 us=467267 /sbin/ip addr add dev tun0 local 10.9.0.1 peer 10.9.0.2
Sun May  7 00:37:42 2017 us=473750 /sbin/ip route add 10.9.0.0/24 via 10.9.0.2
Sun May  7 00:37:42 2017 us=478210 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sun May  7 00:37:42 2017 us=478552 Could not determine IPv4/IPv6 protocol. Using AF_INET
Sun May  7 00:37:42 2017 us=478572 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sun May  7 00:37:42 2017 us=478584 UDPv4 link local (bound): [AF_INET][undef]:8757
Sun May  7 00:37:42 2017 us=478591 UDPv4 link remote: [AF_UNSPEC]
Sun May  7 00:37:42 2017 us=478604 GID set to nogroup
Sun May  7 00:37:42 2017 us=478613 UID set to nobody
Sun May  7 00:37:42 2017 us=478622 MULTI: multi_init called, r=256 v=256
Sun May  7 00:37:42 2017 us=478641 IFCONFIG POOL: base=10.9.0.4 size=62, ipv6=0
Sun May  7 00:37:42 2017 us=478654 IFCONFIG POOL LIST
Sun May  7 00:37:42 2017 us=478677 Initialization Sequence Completed
Sun May  7 00:52:13 2017 us=929869 event_wait : Interrupted system call (code=4)
Sun May  7 00:52:13 2017 us=930008 TCP/UDP: Closing socket
Sun May  7 00:52:13 2017 us=930047 /sbin/ip route del 10.9.0.0/24
Sun May  7 00:52:13 2017 us=930083 openvpn_execve: unable to fork: Resource temporarily unavailable (errno=11)
Sun May  7 00:52:13 2017 us=930092 Exiting due to fatal error
Sun May  7 00:52:13 2017 us=972636 Current Parameter Settings:
Sun May  7 00:52:13 2017 us=972677   config = '/etc/openvpn/server-udp.conf'
Sun May  7 00:52:13 2017 us=972687   mode = 1
Sun May  7 00:52:13 2017 us=972692   persist_config = DISABLED
Sun May  7 00:52:13 2017 us=972697   persist_mode = 1
Sun May  7 00:52:13 2017 us=972702   show_ciphers = DISABLED
Sun May  7 00:52:13 2017 us=972706   show_digests = DISABLED
Sun May  7 00:52:13 2017 us=972711   show_engines = DISABLED
Sun May  7 00:52:13 2017 us=972715   genkey = DISABLED
Sun May  7 00:52:13 2017 us=972720   key_pass_file = '[UNDEF]'
Sun May  7 00:52:13 2017 us=972725   show_tls_ciphers = DISABLED
Sun May  7 00:52:13 2017 us=972729   connect_retry_max = 0
Sun May  7 00:52:13 2017 us=972734 Connection profiles [0]:
Sun May  7 00:52:13 2017 us=972739   proto = udp
Sun May  7 00:52:13 2017 us=972744   local = '[UNDEF]'
Sun May  7 00:52:13 2017 us=972749   local_port = '8757'
Sun May  7 00:52:13 2017 us=972753   remote = '[UNDEF]'
Sun May  7 00:52:13 2017 us=972758   remote_port = '8757'
Sun May  7 00:52:13 2017 us=972763   remote_float = DISABLED
Sun May  7 00:52:13 2017 us=972767   bind_defined = DISABLED
Sun May  7 00:52:13 2017 us=972772   bind_local = ENABLED
Sun May  7 00:52:13 2017 us=972776   bind_ipv6_only = DISABLED
Sun May  7 00:52:13 2017 us=972781   connect_retry_seconds = 5
Sun May  7 00:52:13 2017 us=972785   connect_timeout = 120
Sun May  7 00:52:13 2017 us=972790   socks_proxy_server = '[UNDEF]'
Sun May  7 00:52:13 2017 us=972794   socks_proxy_port = '[UNDEF]'
Sun May  7 00:52:13 2017 us=972799   tun_mtu = 1500
Sun May  7 00:52:13 2017 us=972803   tun_mtu_defined = ENABLED
Sun May  7 00:52:13 2017 us=972808   link_mtu = 1500
Sun May  7 00:52:13 2017 us=972825   link_mtu_defined = DISABLED
Sun May  7 00:52:13 2017 us=972829   tun_mtu_extra = 0
Sun May  7 00:52:13 2017 us=972847   tun_mtu_extra_defined = DISABLED
Sun May  7 00:52:13 2017 us=972851   mtu_discover_type = -1
Sun May  7 00:52:13 2017 us=972855   fragment = 0
Sun May  7 00:52:13 2017 us=972859   mssfix = 1450
Sun May  7 00:52:13 2017 us=972863   explicit_exit_notification = 0
Sun May  7 00:52:13 2017 us=972868 Connection profiles END
Sun May  7 00:52:13 2017 us=972872   remote_random = DISABLED
Sun May  7 00:52:13 2017 us=972876   ipchange = '[UNDEF]'
Sun May  7 00:52:13 2017 us=972880   dev = 'tun'
Sun May  7 00:52:13 2017 us=972884   dev_type = '[UNDEF]'
Sun May  7 00:52:13 2017 us=972888   dev_node = '[UNDEF]'
Sun May  7 00:52:13 2017 us=972892   lladdr = '[UNDEF]'
Sun May  7 00:52:13 2017 us=972896   topology = 1
Sun May  7 00:52:13 2017 us=972900   ifconfig_local = '10.9.0.1'
Sun May  7 00:52:13 2017 us=972904   ifconfig_remote_netmask = '10.9.0.2'
Sun May  7 00:52:13 2017 us=972908   ifconfig_noexec = DISABLED
Sun May  7 00:52:13 2017 us=972912   ifconfig_nowarn = DISABLED
Sun May  7 00:52:13 2017 us=972917   ifconfig_ipv6_local = '[UNDEF]'
Sun May  7 00:52:13 2017 us=972921   ifconfig_ipv6_netbits = 0
Sun May  7 00:52:13 2017 us=972925   ifconfig_ipv6_remote = '[UNDEF]'
Sun May  7 00:52:13 2017 us=972929   shaper = 0
Sun May  7 00:52:13 2017 us=972933   mtu_test = 0
Sun May  7 00:52:13 2017 us=972937   mlock = DISABLED
Sun May  7 00:52:13 2017 us=972941   keepalive_ping = 1800
Sun May  7 00:52:13 2017 us=972950   keepalive_timeout = 3600
Sun May  7 00:52:13 2017 us=972954   inactivity_timeout = 0
Sun May  7 00:52:13 2017 us=972958   ping_send_timeout = 1800
Sun May  7 00:52:13 2017 us=972962   ping_rec_timeout = 7200
Sun May  7 00:52:13 2017 us=972966   ping_rec_timeout_action = 2
Sun May  7 00:52:13 2017 us=972970   ping_timer_remote = DISABLED
Sun May  7 00:52:13 2017 us=972974   remap_sigusr1 = 0
Sun May  7 00:52:13 2017 us=972978   persist_tun = ENABLED
Sun May  7 00:52:13 2017 us=972982   persist_local_ip = DISABLED
Sun May  7 00:52:13 2017 us=972986   persist_remote_ip = DISABLED
Sun May  7 00:52:13 2017 us=972990   persist_key = ENABLED
Sun May  7 00:52:13 2017 us=972994   passtos = DISABLED
Sun May  7 00:52:13 2017 us=972998   resolve_retry_seconds = 1000000000
Sun May  7 00:52:13 2017 us=973001   resolve_in_advance = DISABLED
Sun May  7 00:52:13 2017 us=973005   username = 'nobody'
Sun May  7 00:52:13 2017 us=973009   groupname = 'nogroup'
Sun May  7 00:52:13 2017 us=973013   chroot_dir = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973017   cd_dir = '/etc/openvpn'
Sun May  7 00:52:13 2017 us=973021   writepid = '/run/openvpn/server-udp.pid'
Sun May  7 00:52:13 2017 us=973025   up_script = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973029   down_script = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973032   down_pre = DISABLED
Sun May  7 00:52:13 2017 us=973036   up_restart = DISABLED
Sun May  7 00:52:13 2017 us=973040   up_delay = DISABLED
Sun May  7 00:52:13 2017 us=973056   daemon = ENABLED
Sun May  7 00:52:13 2017 us=973060   inetd = 0
Sun May  7 00:52:13 2017 us=973064   log = ENABLED
Sun May  7 00:52:13 2017 us=973068   suppress_timestamps = DISABLED
Sun May  7 00:52:13 2017 us=973072   machine_readable_output = DISABLED
Sun May  7 00:52:13 2017 us=973076   nice = 0
Sun May  7 00:52:13 2017 us=973081   verbosity = 4
Sun May  7 00:52:13 2017 us=973085   mute = 0
Sun May  7 00:52:13 2017 us=973089   gremlin = 0
Sun May  7 00:52:13 2017 us=973093   status_file = '/run/openvpn/server-udp.status'
Sun May  7 00:52:13 2017 us=973097   status_file_version = 1
Sun May  7 00:52:13 2017 us=973101   status_file_update_freq = 10
Sun May  7 00:52:13 2017 us=973106   occ = ENABLED
Sun May  7 00:52:13 2017 us=973110   rcvbuf = 0
Sun May  7 00:52:13 2017 us=973114   sndbuf = 0
Sun May  7 00:52:13 2017 us=973118   mark = 0
Sun May  7 00:52:13 2017 us=973122   sockflags = 0
Sun May  7 00:52:13 2017 us=973126   fast_io = DISABLED
Sun May  7 00:52:13 2017 us=973130   comp.alg = 2
Sun May  7 00:52:13 2017 us=973134   comp.flags = 0
Sun May  7 00:52:13 2017 us=973138   route_script = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973143   route_default_gateway = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973147   route_default_metric = 0
Sun May  7 00:52:13 2017 us=973151   route_noexec = DISABLED
Sun May  7 00:52:13 2017 us=973156   route_delay = 0
Sun May  7 00:52:13 2017 us=973160   route_delay_window = 30
Sun May  7 00:52:13 2017 us=973164   route_delay_defined = DISABLED
Sun May  7 00:52:13 2017 us=973168   route_nopull = DISABLED
Sun May  7 00:52:13 2017 us=973172   route_gateway_via_dhcp = DISABLED
Sun May  7 00:52:13 2017 us=973177   allow_pull_fqdn = DISABLED
Sun May  7 00:52:13 2017 us=973182   route 10.9.0.0/255.255.255.0/default (not set)/default (not set)
Sun May  7 00:52:13 2017 us=973186   management_addr = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973191   management_port = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973195   management_user_pass = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973199   management_log_history_cache = 250
Sun May  7 00:52:13 2017 us=973203   management_echo_buffer_size = 100
Sun May  7 00:52:13 2017 us=973208   management_write_peer_info_file = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973212   management_client_user = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973216   management_client_group = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973220   management_flags = 0
Sun May  7 00:52:13 2017 us=973225   shared_secret_file = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973229   key_direction = 1
Sun May  7 00:52:13 2017 us=973233   ciphername = 'AES-256-CBC'
Sun May  7 00:52:13 2017 us=973239   ncp_enabled = ENABLED
Sun May  7 00:52:13 2017 us=973244   ncp_ciphers = 'AES-256-GCM:AES-128-GCM'
Sun May  7 00:52:13 2017 us=973248   authname = 'SHA256'
Sun May  7 00:52:13 2017 us=973253   prng_hash = 'SHA1'
Sun May  7 00:52:13 2017 us=973257   prng_nonce_secret_len = 16
Sun May  7 00:52:13 2017 us=973261   keysize = 0
Sun May  7 00:52:13 2017 us=973266   engine = DISABLED
Sun May  7 00:52:13 2017 us=973270   replay = ENABLED
Sun May  7 00:52:13 2017 us=973274   mute_replay_warnings = DISABLED
Sun May  7 00:52:13 2017 us=973278   replay_window = 64
Sun May  7 00:52:13 2017 us=973283   replay_time = 15
Sun May  7 00:52:13 2017 us=973287   packet_id_file = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973291   use_iv = ENABLED
Sun May  7 00:52:13 2017 us=973295   test_crypto = DISABLED
Sun May  7 00:52:13 2017 us=973299   tls_server = ENABLED
Sun May  7 00:52:13 2017 us=973303   tls_client = DISABLED
Sun May  7 00:52:13 2017 us=973308   key_method = 2
Sun May  7 00:52:13 2017 us=973312   ca_file = 'ca.crt'
Sun May  7 00:52:13 2017 us=973316   ca_path = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973320   dh_file = '/etc/ssl/dhparams.pem'
Sun May  7 00:52:13 2017 us=973324   cert_file = 'server.crt'
Sun May  7 00:52:13 2017 us=973329   extra_certs_file = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973346   priv_key_file = 'server.key'
Sun May  7 00:52:13 2017 us=973351   pkcs12_file = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973354   cipher_list = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973358   tls_verify = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973362   tls_export_cert = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973366   verify_x509_type = 0
Sun May  7 00:52:13 2017 us=973370   verify_x509_name = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973374   crl_file = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973378   ns_cert_type = 0
Sun May  7 00:52:13 2017 us=973382   remote_cert_ku[i] = 65535
Sun May  7 00:52:13 2017 us=973386   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973389   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973393   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973397   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973401   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973405   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973409   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973413   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973417   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973420   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973424   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973428   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973432   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973436   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973440   remote_cert_ku[i] = 0
Sun May  7 00:52:13 2017 us=973444   remote_cert_eku = 'TLS Web Client Authentication'
Sun May  7 00:52:13 2017 us=973448   ssl_flags = 192
Sun May  7 00:52:13 2017 us=973452   tls_timeout = 2
Sun May  7 00:52:13 2017 us=973456   renegotiate_bytes = -1
Sun May  7 00:52:13 2017 us=973460   renegotiate_packets = 0
Sun May  7 00:52:13 2017 us=973464   renegotiate_seconds = 3600
Sun May  7 00:52:13 2017 us=973468   handshake_window = 60
Sun May  7 00:52:13 2017 us=973472   transition_window = 3600
Sun May  7 00:52:13 2017 us=973476   single_session = DISABLED
Sun May  7 00:52:13 2017 us=973480   push_peer_info = DISABLED
Sun May  7 00:52:13 2017 us=973484   tls_exit = DISABLED
Sun May  7 00:52:13 2017 us=973487   tls_auth_file = 'ta.key'
Sun May  7 00:52:13 2017 us=973492   tls_crypt_file = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973496   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973500   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973504   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973507   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973511   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973515   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973532   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973537   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973541   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973546   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973550   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973554   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973558   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973563   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973567   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973571   pkcs11_protected_authentication = DISABLED
Sun May  7 00:52:13 2017 us=973576   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973581   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973585   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973589   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973593   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973598   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973602   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973606   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973610   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973614   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973619   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973623   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973627   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973632   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973636   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973640   pkcs11_private_mode = 00000000
Sun May  7 00:52:13 2017 us=973644   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973649   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973653   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973657   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973661   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973666   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973670   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973674   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973678   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973683   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973687   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973691   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973696   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973700   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973704   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973708   pkcs11_cert_private = DISABLED
Sun May  7 00:52:13 2017 us=973713   pkcs11_pin_cache_period = -1
Sun May  7 00:52:13 2017 us=973717   pkcs11_id = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973722   pkcs11_id_management = DISABLED
Sun May  7 00:52:13 2017 us=973727   server_network = 10.9.0.0
Sun May  7 00:52:13 2017 us=973732   server_netmask = 255.255.255.0
Sun May  7 00:52:13 2017 us=973740   server_network_ipv6 = ::
Sun May  7 00:52:13 2017 us=973745   server_netbits_ipv6 = 0
Sun May  7 00:52:13 2017 us=973750   server_bridge_ip = 0.0.0.0
Sun May  7 00:52:13 2017 us=973754   server_bridge_netmask = 0.0.0.0
Sun May  7 00:52:13 2017 us=973759   server_bridge_pool_start = 0.0.0.0
Sun May  7 00:52:13 2017 us=973764   server_bridge_pool_end = 0.0.0.0
Sun May  7 00:52:13 2017 us=973769   push_entry = 'dhcp-option DNS 10.9.0.1'
Sun May  7 00:52:13 2017 us=973773   push_entry = 'redirect-gateway def1'
Sun May  7 00:52:13 2017 us=973778   push_entry = 'block-outside-dns'
Sun May  7 00:52:13 2017 us=973783   push_entry = 'route 10.9.0.0 255.255.255.0'
Sun May  7 00:52:13 2017 us=973787   push_entry = 'topology net30'
Sun May  7 00:52:13 2017 us=973794   push_entry = 'ping 1800'
Sun May  7 00:52:13 2017 us=973811   push_entry = 'ping-restart 3600'
Sun May  7 00:52:13 2017 us=973815   ifconfig_pool_defined = ENABLED
Sun May  7 00:52:13 2017 us=973832   ifconfig_pool_start = 10.9.0.4
Sun May  7 00:52:13 2017 us=973837   ifconfig_pool_end = 10.9.0.251
Sun May  7 00:52:13 2017 us=973841   ifconfig_pool_netmask = 0.0.0.0
Sun May  7 00:52:13 2017 us=973845   ifconfig_pool_persist_filename = 'ipp.txt'
Sun May  7 00:52:13 2017 us=973849   ifconfig_pool_persist_refresh_freq = 600
Sun May  7 00:52:13 2017 us=973853   ifconfig_ipv6_pool_defined = DISABLED
Sun May  7 00:52:13 2017 us=973857   ifconfig_ipv6_pool_base = ::
Sun May  7 00:52:13 2017 us=973861   ifconfig_ipv6_pool_netbits = 0
Sun May  7 00:52:13 2017 us=973865   n_bcast_buf = 256
Sun May  7 00:52:13 2017 us=973869   tcp_queue_limit = 64
Sun May  7 00:52:13 2017 us=973873   real_hash_size = 256
Sun May  7 00:52:13 2017 us=973877   virtual_hash_size = 256
Sun May  7 00:52:13 2017 us=973881   client_connect_script = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973885   learn_address_script = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973889   client_disconnect_script = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973893   client_config_dir = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973897   ccd_exclusive = DISABLED
Sun May  7 00:52:13 2017 us=973901   tmp_dir = '/tmp'
Sun May  7 00:52:13 2017 us=973905   push_ifconfig_defined = DISABLED
Sun May  7 00:52:13 2017 us=973909   push_ifconfig_local = 0.0.0.0
Sun May  7 00:52:13 2017 us=973914   push_ifconfig_remote_netmask = 0.0.0.0
Sun May  7 00:52:13 2017 us=973918   push_ifconfig_ipv6_defined = DISABLED
Sun May  7 00:52:13 2017 us=973922   push_ifconfig_ipv6_local = ::/0
Sun May  7 00:52:13 2017 us=973926   push_ifconfig_ipv6_remote = ::
Sun May  7 00:52:13 2017 us=973930   enable_c2c = ENABLED
Sun May  7 00:52:13 2017 us=973949   duplicate_cn = ENABLED
Sun May  7 00:52:13 2017 us=973955   cf_max = 0
Sun May  7 00:52:13 2017 us=973959   cf_per = 0
Sun May  7 00:52:13 2017 us=973975   max_clients = 1024
Sun May  7 00:52:13 2017 us=973979   max_routes_per_client = 256
Sun May  7 00:52:13 2017 us=973984   auth_user_pass_verify_script = '[UNDEF]'
Sun May  7 00:52:13 2017 us=973988   auth_user_pass_verify_script_via_file = DISABLED
Sun May  7 00:52:13 2017 us=973993   auth_token_generate = DISABLED
Sun May  7 00:52:13 2017 us=973997   auth_token_lifetime = 0
Sun May  7 00:52:13 2017 us=974002   port_share_host = '[UNDEF]'
Sun May  7 00:52:13 2017 us=974006   port_share_port = '[UNDEF]'
Sun May  7 00:52:13 2017 us=974011   client = DISABLED
Sun May  7 00:52:13 2017 us=974015   pull = DISABLED
Sun May  7 00:52:13 2017 us=974020   auth_user_pass_file = '[UNDEF]'
Sun May  7 00:52:13 2017 us=974025 OpenVPN 2.4.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Mar 22 2017
Sun May  7 00:52:13 2017 us=974039 library versions: OpenSSL 1.0.2g  1 Mar 2016, LZO 2.08
Sun May  7 00:52:13 2017 us=978851 WARNING: --ifconfig-pool-persist will not work with --duplicate-cn
Sun May  7 00:52:13 2017 us=980482 Diffie-Hellman initialized with 2048 bit key
Sun May  7 00:52:13 2017 us=980801 Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun May  7 00:52:13 2017 us=980816 Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun May  7 00:52:13 2017 us=980826 TLS-Auth MTU parms [ L:1622 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Sun May  7 00:52:13 2017 us=980958 ROUTE_GATEWAY 172.31.64.1/255.255.240.0 IFACE=eth0 HWADDR=12:25:eb:b2:33:d2
Sun May  7 00:52:13 2017 us=981873 TUN/TAP device tun0 opened
Sun May  7 00:52:13 2017 us=981894 TUN/TAP TX queue length set to 100
Sun May  7 00:52:13 2017 us=981905 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Sun May  7 00:52:13 2017 us=981917 /sbin/ip link set dev tun0 up mtu 1500
Sun May  7 00:52:13 2017 us=983415 /sbin/ip addr add dev tun0 local 10.9.0.1 peer 10.9.0.2
Sun May  7 00:52:13 2017 us=986398 /sbin/ip route add 10.9.0.0/24 via 10.9.0.2
Sun May  7 00:52:13 2017 us=988113 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sun May  7 00:52:13 2017 us=988460 Could not determine IPv4/IPv6 protocol. Using AF_INET
Sun May  7 00:52:13 2017 us=988479 Socket Buffers: R=[212992->212992] S=[212992->212992]
Sun May  7 00:52:13 2017 us=988491 UDPv4 link local (bound): [AF_INET][undef]:8757
Sun May  7 00:52:13 2017 us=988497 UDPv4 link remote: [AF_UNSPEC]
Sun May  7 00:52:13 2017 us=988506 GID set to nogroup
Sun May  7 00:52:13 2017 us=988513 UID set to nobody
Sun May  7 00:52:13 2017 us=988521 MULTI: multi_init called, r=256 v=256
Sun May  7 00:52:13 2017 us=988544 IFCONFIG POOL: base=10.9.0.4 size=62, ipv6=0
Sun May  7 00:52:13 2017 us=988557 IFCONFIG POOL LIST
Sun May  7 00:52:13 2017 us=988578 Initialization Sequence Completed
Sun May  7 01:07:32 2017 us=62357 MULTI: multi_create_instance called
Sun May  7 01:07:32 2017 us=62445 b.b.b.b:9723 Re-using SSL/TLS context
Sun May  7 01:07:32 2017 us=62460 b.b.b.b:9723 LZO compression initializing
Sun May  7 01:07:32 2017 us=62556 b.b.b.b:9723 Control Channel MTU parms [ L:1622 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Sun May  7 01:07:32 2017 us=62567 b.b.b.b:9723 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sun May  7 01:07:32 2017 us=62592 b.b.b.b:9723 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Sun May  7 01:07:32 2017 us=62601 b.b.b.b:9723 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Sun May  7 01:07:32 2017 us=62627 b.b.b.b:9723 TLS: Initial packet from [AF_INET]b.b.b.b:9723, sid=ea062ed4 11aa4ac7
Sun May  7 01:07:32 2017 us=97117 b.b.b.b:9723 VERIFY OK: depth=1, C=US, ST=California, L=Beverly Hills, O=ACME CORPORATION, OU=Anvil Department, CN=ca-certificate
Sun May  7 01:07:32 2017 us=97291 b.b.b.b:9723 VERIFY KU OK
Sun May  7 01:07:32 2017 us=97307 b.b.b.b:9723 Validating certificate extended key usage
Sun May  7 01:07:32 2017 us=97314 b.b.b.b:9723 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Sun May  7 01:07:32 2017 us=97319 b.b.b.b:9723 VERIFY EKU OK
Sun May  7 01:07:32 2017 us=97324 b.b.b.b:9723 VERIFY OK: depth=0, C=US, ST=California, L=Beverly Hills, O=ACME CORPORATION, OU=Anvil Department, CN=client-3
Sun May  7 01:07:32 2017 us=108985 b.b.b.b:9723 peer info: IV_VER=2.3.14
Sun May  7 01:07:32 2017 us=109005 b.b.b.b:9723 peer info: IV_PLAT=freebsd
Sun May  7 01:07:32 2017 us=109012 b.b.b.b:9723 peer info: IV_PROTO=2
Sun May  7 01:07:32 2017 us=109082 b.b.b.b:9723 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun May  7 01:07:32 2017 us=109093 b.b.b.b:9723 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun May  7 01:07:32 2017 us=109099 b.b.b.b:9723 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun May  7 01:07:32 2017 us=109106 b.b.b.b:9723 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun May  7 01:07:32 2017 us=122591 b.b.b.b:9723 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sun May  7 01:07:32 2017 us=122631 b.b.b.b:9723 [client-3] Peer Connection Initiated with [AF_INET]b.b.b.b:9723
Sun May  7 01:07:32 2017 us=122650 client-3/b.b.b.b:9723 MULTI_sva: pool returned IPv4=10.9.0.6, IPv6=(Not enabled)
Sun May  7 01:07:32 2017 us=122677 client-3/b.b.b.b:9723 MULTI: Learn: 10.9.0.6 -> client-3/b.b.b.b:9723
Sun May  7 01:07:32 2017 us=122685 client-3/b.b.b.b:9723 MULTI: primary virtual IP for client-3/b.b.b.b:9723: 10.9.0.6
Sun May  7 01:07:34 2017 us=237900 client-3/b.b.b.b:9723 PUSH: Received control message: 'PUSH_REQUEST'
Sun May  7 01:07:34 2017 us=238008 client-3/b.b.b.b:9723 SENT CONTROL [client-3]: 'PUSH_REPLY,dhcp-option DNS 10.9.0.1,redirect-gateway def1,block-outside-dns,route 10.9.0.0 255.255.255.0,topology net30,ping 1800,ping-restart 3600,ifconfig 10.9.0.6 10.9.0.5,peer-id 0' (status=1)
Sun May  7 01:07:35 2017 us=553205 client-3/b.b.b.b:9723 MULTI: bad source address from client [10.8.0.6], packet dropped
Sun May  7 01:08:09 2017 us=748712 MULTI: multi_create_instance called
Sun May  7 01:08:09 2017 us=748838 b.b.b.b:51423 Re-using SSL/TLS context
Sun May  7 01:08:09 2017 us=748860 b.b.b.b:51423 LZO compression initializing
Sun May  7 01:08:09 2017 us=748949 b.b.b.b:51423 Control Channel MTU parms [ L:1622 D:1172 EF:78 EB:0 ET:0 EL:3 ]
Sun May  7 01:08:09 2017 us=748960 b.b.b.b:51423 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Sun May  7 01:08:09 2017 us=748985 b.b.b.b:51423 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
Sun May  7 01:08:09 2017 us=748992 b.b.b.b:51423 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
Sun May  7 01:08:09 2017 us=749016 b.b.b.b:51423 TLS: Initial packet from [AF_INET]b.b.b.b:51423, sid=0799278a 02ef4b07
Sun May  7 01:08:09 2017 us=788594 b.b.b.b:51423 VERIFY OK: depth=1, C=US, ST=California, L=Beverly Hills, O=ACME CORPORATION, OU=Anvil Department, CN=ca-certificate
Sun May  7 01:08:09 2017 us=788772 b.b.b.b:51423 VERIFY KU OK
Sun May  7 01:08:09 2017 us=788784 b.b.b.b:51423 Validating certificate extended key usage
Sun May  7 01:08:09 2017 us=788792 b.b.b.b:51423 ++ Certificate has EKU (str) TLS Web Client Authentication, expects TLS Web Client Authentication
Sun May  7 01:08:09 2017 us=788797 b.b.b.b:51423 VERIFY EKU OK
Sun May  7 01:08:09 2017 us=788801 b.b.b.b:51423 VERIFY OK: depth=0, C=US, ST=California, L=Beverly Hills, O=ACME CORPORATION, OU=Anvil Department, CN=client-3
Sun May  7 01:08:09 2017 us=803243 b.b.b.b:51423 peer info: IV_VER=2.3.14
Sun May  7 01:08:09 2017 us=803283 b.b.b.b:51423 peer info: IV_PLAT=freebsd
Sun May  7 01:08:09 2017 us=803289 b.b.b.b:51423 peer info: IV_PROTO=2
Sun May  7 01:08:09 2017 us=803371 b.b.b.b:51423 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun May  7 01:08:09 2017 us=803382 b.b.b.b:51423 Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun May  7 01:08:09 2017 us=803389 b.b.b.b:51423 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Sun May  7 01:08:09 2017 us=803395 b.b.b.b:51423 Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
Sun May  7 01:08:09 2017 us=815212 b.b.b.b:51423 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Sun May  7 01:08:09 2017 us=815260 b.b.b.b:51423 [client-3] Peer Connection Initiated with [AF_INET]b.b.b.b:51423
Sun May  7 01:08:09 2017 us=815279 client-3/b.b.b.b:51423 MULTI_sva: pool returned IPv4=10.9.0.10, IPv6=(Not enabled)
Sun May  7 01:08:09 2017 us=815306 client-3/b.b.b.b:51423 MULTI: Learn: 10.9.0.10 -> client-3/b.b.b.b:51423
Sun May  7 01:08:09 2017 us=815316 client-3/b.b.b.b:51423 MULTI: primary virtual IP for client-3/b.b.b.b:51423: 10.9.0.10
Sun May  7 01:08:11 2017 us=991272 client-3/b.b.b.b:51423 PUSH: Received control message: 'PUSH_REQUEST'
Sun May  7 01:08:11 2017 us=991394 client-3/b.b.b.b:51423 SENT CONTROL [client-3]: 'PUSH_REPLY,dhcp-option DNS 10.9.0.1,redirect-gateway def1,block-outside-dns,route 10.9.0.0 255.255.255.0,topology net30,ping 1800,ping-restart 3600,ifconfig 10.9.0.10 10.9.0.9,peer-id 1' (status=1)
Sun May  7 01:08:12 2017 us=106506 client-3/b.b.b.b:51423 MULTI: bad source address from client [::], packet dropped
Sun May  7 01:08:12 2017 us=294514 client-3/b.b.b.b:51423 MULTI: bad source address from client [::], packet dropped
Sun May  7 01:08:12 2017 us=301198 client-3/b.b.b.b:51423 MULTI: bad source address from client [10.9.0.6], packet dropped
Sun May  7 01:08:12 2017 us=692690 client-3/b.b.b.b:51423 MULTI: bad source address from client [::], packet dropped
Sun May  7 01:08:12 2017 us=813201 client-3/b.b.b.b:51423 MULTI: bad source address from client [10.9.0.6], packet dropped
Sun May  7 01:08:13 2017 us=96230 client-3/b.b.b.b:51423 MULTI: bad source address from client [::], packet dropped
Sun May  7 01:08:13 2017 us=386707 client-3/b.b.b.b:51423 MULTI: bad source address from client [10.9.0.6], packet dropped

fidesachates

With TCP, I see these extra errors:

sun May  7 00:56:11 2017 us=496744 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=496853 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=496877 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=496889 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=496895 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=496901 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=496907 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=496914 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=496920 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=496926 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=496932 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=513296 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=513321 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=513330 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530427 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530448 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530457 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530464 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530470 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530476 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530494 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530500 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530515 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530521 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530527 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530532 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=530538 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548791 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548819 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548827 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548834 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548840 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548845 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548851 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548857 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548863 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548869 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548875 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548881 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548887 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548893 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548899 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548905 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548911 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548917 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548923 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548929 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548935 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548941 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548946 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548952 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548965 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548972 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548978 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
Sun May  7 00:56:11 2017 us=548984 client-3/b.b.b.b:14935 MULTI: packet dropped due to output saturation (multi_process_incoming_tun)

* Client *
Operating System:

FreeBSD cerberus.private 10.3-RELEASE-p16 FreeBSD 10.3-RELEASE-p16 #9 d88504507(RELENG_2_3_3): Wed Feb 15 11:30:33 CST 2017     root@ce23-amd64-builder:/builder/pfsense-233/tmp/obj/builder/pfsense-233/tmp/FreeBSD-src/sys/pfSense  amd64

Network setup:

igb0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=400bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWTSO>
        ether 40:8d:5c:f7:50:a5
        inet 10.36.66.1 netmask 0xffffff00 broadcast 10.36.66.255 
        inet6 fe80::1:1%igb0 prefixlen 64 scopeid 0x1 
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=4009b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,VLAN_HWTSO>
        ether 40:8d:5c:f7:29:91
        inet6 fe80::428d:5cff:fef7:2991%em0 prefixlen 64 scopeid 0x2 
        inet b.b.b.b netmask 0xffffff00 broadcast 74.101.35.255 
        nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
pflog0: flags=100<PROMISC> metric 0 mtu 33160
pfsync0: flags=0<> metric 0 mtu 1500
        syncpeer: 224.0.0.240 maxupd: 128 defer: on
        syncok: 1
enc0: flags=0<> metric 0 mtu 1536
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
        inet 127.0.0.1 netmask 0xff000000 
        inet6 ::1 prefixlen 128 
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6 
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
ovpnc1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1500
        options=80000<LINKSTATE>
        inet6 fe80::428d:5cff:fef7:50a5%ovpnc1 prefixlen 64 scopeid 0x7 
        inet 10.9.0.10 --> 10.9.0.9 netmask 0xffffffff 
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        Opened by PID 36422
ovpns2: flags=8010<POINTOPOINT,MULTICAST> metric 0 mtu 1500
        options=80000<LINKSTATE>
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
ovpnc3: flags=8010<POINTOPOINT,MULTICAST> metric 0 mtu 1500
        options=80000<LINKSTATE>
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

Conf: dev ovpnc1
verb 4
dev-type tun
dev-node /dev/tun1
writepid /var/run/openvpn_client1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-256-CBC
auth SHA256
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
local 74.101.35.177
tls-client
client
lport 0
management /var/etc/openvpn/client1.sock unix
remote 34.202.242.38 8757
ca /var/etc/openvpn/client1.ca
cert /var/etc/openvpn/client1.cert
key /var/etc/openvpn/client1.key
tls-auth /var/etc/openvpn/client1.tls-auth 1
comp-lzo yes
resolv-retry infinite
#nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name deathy.tagtail name
tls-version-min 1.2
key-direction 1
max-routes 200
#route 34.202.242.38 255.255.255.255 net_gateway log:

May  6 21:27:54 cerberus openvpn[6389]: Current Parameter Settings:
May  6 21:27:54 cerberus openvpn[6389]:   config = '/var/etc/openvpn/client1.conf'
May  6 21:27:54 cerberus openvpn[6389]:   mode = 0
May  6 21:27:54 cerberus openvpn[6389]:   show_ciphers = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   show_digests = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   show_engines = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   genkey = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   key_pass_file = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   show_tls_ciphers = DISABLED
May  6 21:27:54 cerberus openvpn[6389]: Connection profiles [default]:
May  6 21:27:54 cerberus openvpn[6389]:   proto = udp
May  6 21:27:54 cerberus openvpn[6389]:   local = 'b.b.b.b'
May  6 21:27:54 cerberus openvpn[6389]:   local_port = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote = 'd.d.d.d'
May  6 21:27:54 cerberus openvpn[6389]:   remote_port = 8757
May  6 21:27:54 cerberus openvpn[6389]:   remote_float = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   bind_defined = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   bind_local = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   connect_retry_seconds = 5
May  6 21:27:54 cerberus openvpn[6389]:   connect_timeout = 10
May  6 21:27:54 cerberus openvpn[6389]:   connect_retry_max = 0
May  6 21:27:54 cerberus openvpn[6389]:   socks_proxy_server = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   socks_proxy_port = 0
May  6 21:27:54 cerberus openvpn[6389]:   socks_proxy_retry = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   tun_mtu = 1500
May  6 21:27:54 cerberus openvpn[6389]:   tun_mtu_defined = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   link_mtu = 1500
May  6 21:27:54 cerberus openvpn[6389]:   link_mtu_defined = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   tun_mtu_extra = 0
May  6 21:27:54 cerberus openvpn[6389]:   tun_mtu_extra_defined = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   mtu_discover_type = -1
May  6 21:27:54 cerberus openvpn[6389]:   fragment = 0
May  6 21:27:54 cerberus openvpn[6389]:   mssfix = 1450
May  6 21:27:54 cerberus openvpn[6389]:   explicit_exit_notification = 0
May  6 21:27:54 cerberus openvpn[6389]: Connection profiles END
May  6 21:27:54 cerberus openvpn[6389]:   remote_random = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   ipchange = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   dev = 'ovpnc1'
May  6 21:27:54 cerberus openvpn[6389]:   dev_type = 'tun'
May  6 21:27:54 cerberus openvpn[6389]:   dev_node = '/dev/tun1'
May  6 21:27:54 cerberus openvpn[6389]:   lladdr = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   topology = 1
May  6 21:27:54 cerberus openvpn[6389]:   tun_ipv6 = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_local = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_remote_netmask = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_noexec = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_nowarn = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_ipv6_local = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_ipv6_netbits = 0
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_ipv6_remote = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   shaper = 0
May  6 21:27:54 cerberus openvpn[6389]:   mtu_test = 0
May  6 21:27:54 cerberus openvpn[6389]:   mlock = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   keepalive_ping = 10
May  6 21:27:54 cerberus openvpn[6389]:   keepalive_timeout = 60
May  6 21:27:54 cerberus openvpn[6389]:   inactivity_timeout = 0
May  6 21:27:54 cerberus openvpn[6389]:   ping_send_timeout = 10
May  6 21:27:54 cerberus openvpn[6389]:   ping_rec_timeout = 60
May  6 21:27:54 cerberus openvpn[6389]:   ping_rec_timeout_action = 2
May  6 21:27:54 cerberus openvpn[6389]:   ping_timer_remote = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   remap_sigusr1 = 0
May  6 21:27:54 cerberus openvpn[6389]:   persist_tun = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   persist_local_ip = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   persist_remote_ip = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   persist_key = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   passtos = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   resolve_retry_seconds = 1000000000
May  6 21:27:54 cerberus openvpn[6389]:   username = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   groupname = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   chroot_dir = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   cd_dir = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   writepid = '/var/run/openvpn_client1.pid'
May  6 21:27:54 cerberus openvpn[6389]:   up_script = '/usr/local/sbin/ovpn-linkup'
May  6 21:27:54 cerberus openvpn[6389]:   down_script = '/usr/local/sbin/ovpn-linkdown'
May  6 21:27:54 cerberus openvpn[6389]:   down_pre = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   up_restart = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   up_delay = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   daemon = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   inetd = 0
May  6 21:27:54 cerberus openvpn[6389]:   log = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   suppress_timestamps = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   nice = 0
May  6 21:27:54 cerberus openvpn[6389]:   verbosity = 4
May  6 21:27:54 cerberus openvpn[6389]:   mute = 0
May  6 21:27:54 cerberus openvpn[6389]:   gremlin = 0
May  6 21:27:54 cerberus openvpn[6389]:   status_file = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   status_file_version = 1
May  6 21:27:54 cerberus openvpn[6389]:   status_file_update_freq = 60
May  6 21:27:54 cerberus openvpn[6389]:   occ = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   rcvbuf = 0
May  6 21:27:54 cerberus openvpn[6389]:   sndbuf = 0
May  6 21:27:54 cerberus openvpn[6389]:   sockflags = 0
May  6 21:27:54 cerberus openvpn[6389]:   fast_io = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   lzo = 3
May  6 21:27:54 cerberus openvpn[6389]:   route_script = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   route_default_gateway = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   route_default_metric = 0
May  6 21:27:54 cerberus openvpn[6389]:   route_noexec = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   route_delay = 0
May  6 21:27:54 cerberus openvpn[6389]:   route_delay_window = 30
May  6 21:27:54 cerberus openvpn[6389]:   route_delay_defined = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   route_nopull = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   route_gateway_via_dhcp = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   max_routes = 200
May  6 21:27:54 cerberus openvpn[6389]:   allow_pull_fqdn = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   management_addr = '/var/etc/openvpn/client1.sock'
May  6 21:27:54 cerberus openvpn[6389]:   management_port = 0
May  6 21:27:54 cerberus openvpn[6389]:   management_user_pass = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   management_log_history_cache = 250
May  6 21:27:54 cerberus openvpn[6389]:   management_echo_buffer_size = 100
May  6 21:27:54 cerberus openvpn[6389]:   management_write_peer_info_file = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   management_client_user = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   management_client_group = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   management_flags = 256
May  6 21:27:54 cerberus openvpn[6389]:   shared_secret_file = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   key_direction = 2
May  6 21:27:54 cerberus openvpn[6389]:   ciphername_defined = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   ciphername = 'AES-256-CBC'
May  6 21:27:54 cerberus openvpn[6389]:   authname_defined = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   authname = 'SHA256'
May  6 21:27:54 cerberus openvpn[6389]:   prng_hash = 'SHA1'
May  6 21:27:54 cerberus openvpn[6389]:   prng_nonce_secret_len = 16
May  6 21:27:54 cerberus openvpn[6389]:   keysize = 0
May  6 21:27:54 cerberus openvpn[6389]:   engine = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   replay = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   mute_replay_warnings = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   replay_window = 64
May  6 21:27:54 cerberus openvpn[6389]:   replay_time = 15
May  6 21:27:54 cerberus openvpn[6389]:   packet_id_file = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   use_iv = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   test_crypto = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   tls_server = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   tls_client = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   key_method = 2
May  6 21:27:54 cerberus openvpn[6389]:   ca_file = '/var/etc/openvpn/client1.ca'
May  6 21:27:54 cerberus openvpn[6389]:   ca_path = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   dh_file = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   cert_file = '/var/etc/openvpn/client1.cert'
May  6 21:27:54 cerberus openvpn[6389]:   extra_certs_file = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   priv_key_file = '/var/etc/openvpn/client1.key'
May  6 21:27:54 cerberus openvpn[6389]:   pkcs12_file = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   cipher_list = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   tls_verify = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   tls_export_cert = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   verify_x509_type = 2
May  6 21:27:54 cerberus openvpn[6389]:   verify_x509_name = 'deathy.tagtail'
May  6 21:27:54 cerberus openvpn[6389]:   crl_file = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   ns_cert_type = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 160
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 136
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_ku[i] = 0
May  6 21:27:54 cerberus openvpn[6389]:   remote_cert_eku = 'TLS Web Server Authentication'
May  6 21:27:54 cerberus openvpn[6389]:   ssl_flags = 192
May  6 21:27:54 cerberus openvpn[6389]:   tls_timeout = 2
May  6 21:27:54 cerberus openvpn[6389]:   renegotiate_bytes = -1
May  6 21:27:54 cerberus openvpn[6389]:   renegotiate_packets = 0
May  6 21:27:54 cerberus openvpn[6389]:   renegotiate_seconds = 3600
May  6 21:27:54 cerberus openvpn[6389]:   handshake_window = 60
May  6 21:27:54 cerberus openvpn[6389]:   transition_window = 3600
May  6 21:27:54 cerberus openvpn[6389]:   single_session = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   push_peer_info = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   tls_exit = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   tls_auth_file = '/var/etc/openvpn/client1.tls-auth'
May  6 21:27:54 cerberus openvpn[6389]:   server_network = 0.0.0.0
May  6 21:27:54 cerberus openvpn[6389]:   server_netmask = 0.0.0.0
May  6 21:27:54 cerberus openvpn[6389]:   server_network_ipv6 = ::
May  6 21:27:54 cerberus openvpn[6389]:   server_netbits_ipv6 = 0
May  6 21:27:54 cerberus openvpn[6389]:   server_bridge_ip = 0.0.0.0
May  6 21:27:54 cerberus openvpn[6389]:   server_bridge_netmask = 0.0.0.0
May  6 21:27:54 cerberus openvpn[6389]:   server_bridge_pool_start = 0.0.0.0
May  6 21:27:54 cerberus openvpn[6389]:   server_bridge_pool_end = 0.0.0.0
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_pool_defined = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_pool_start = 0.0.0.0
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_pool_end = 0.0.0.0
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_pool_netmask = 0.0.0.0
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_pool_persist_filename = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_pool_persist_refresh_freq = 600
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_ipv6_pool_defined = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_ipv6_pool_base = ::
May  6 21:27:54 cerberus openvpn[6389]:   ifconfig_ipv6_pool_netbits = 0
May  6 21:27:54 cerberus openvpn[6389]:   n_bcast_buf = 256
May  6 21:27:54 cerberus openvpn[6389]:   tcp_queue_limit = 64
May  6 21:27:54 cerberus openvpn[6389]:   real_hash_size = 256
May  6 21:27:54 cerberus openvpn[6389]:   virtual_hash_size = 256
May  6 21:27:54 cerberus openvpn[6389]:   client_connect_script = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   learn_address_script = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   client_disconnect_script = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   client_config_dir = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   ccd_exclusive = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   tmp_dir = '/tmp'
May  6 21:27:54 cerberus openvpn[6389]:   push_ifconfig_defined = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   push_ifconfig_local = 0.0.0.0
May  6 21:27:54 cerberus openvpn[6389]:   push_ifconfig_remote_netmask = 0.0.0.0
May  6 21:27:54 cerberus openvpn[6389]:   push_ifconfig_ipv6_defined = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   push_ifconfig_ipv6_local = ::/0
May  6 21:27:54 cerberus openvpn[6389]:   push_ifconfig_ipv6_remote = ::
May  6 21:27:54 cerberus openvpn[6389]:   enable_c2c = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   duplicate_cn = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   cf_max = 0
May  6 21:27:54 cerberus openvpn[6389]:   cf_per = 0
May  6 21:27:54 cerberus openvpn[6389]:   max_clients = 1024
May  6 21:27:54 cerberus openvpn[6389]:   max_routes_per_client = 256
May  6 21:27:54 cerberus openvpn[6389]:   auth_user_pass_verify_script = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   auth_user_pass_verify_script_via_file = DISABLED
May  6 21:27:54 cerberus openvpn[6389]:   port_share_host = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]:   port_share_port = 0
May  6 21:27:54 cerberus openvpn[6389]:   client = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   pull = ENABLED
May  6 21:27:54 cerberus openvpn[6389]:   auth_user_pass_file = '[UNDEF]'
May  6 21:27:54 cerberus openvpn[6389]: OpenVPN 2.3.14 amd64-portbld-freebsd10.3 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Feb 15 2017
May  6 21:27:54 cerberus openvpn[6389]: library versions: OpenSSL 1.0.1s-freebsd  1 Mar 2016, LZO 2.09
May  6 21:27:54 cerberus openvpn[6607]: MANAGEMENT: unix domain socket listening on /var/etc/openvpn/client1.sock
May  6 21:27:54 cerberus openvpn[6607]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May  6 21:27:54 cerberus openvpn[6607]: Control Channel Authentication: using '/var/etc/openvpn/client1.tls-auth' as a OpenVPN static key file
May  6 21:27:54 cerberus openvpn[6607]: Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
May  6 21:27:54 cerberus openvpn[6607]: Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
May  6 21:27:54 cerberus openvpn[6607]: LZO compression initialized
May  6 21:27:54 cerberus openvpn[6607]: Control Channel MTU parms [ L:1570 D:1172 EF:78 EB:0 ET:0 EL:3 ]
May  6 21:27:54 cerberus openvpn[6607]: Socket Buffers: R=[42080->42080] S=[57344->57344]
May  6 21:27:54 cerberus openvpn[6607]: Data Channel MTU parms [ L:1570 D:1450 EF:70 EB:143 ET:0 EL:3 AF:3/1 ]
May  6 21:27:54 cerberus openvpn[6607]: Local Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-client'
May  6 21:27:54 cerberus openvpn[6607]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1570,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA256,keysize 256,tls-auth,key-method 2,tls-server'
May  6 21:27:54 cerberus openvpn[6607]: Local Options hash (VER=V4): '73e43c96'
May  6 21:27:54 cerberus openvpn[6607]: Expected Remote Options hash (VER=V4): '8a3b3cca'
May  6 21:27:54 cerberus openvpn[6607]: UDPv4 link local (bound): [AF_INET]b.b.b.b
May  6 21:27:54 cerberus openvpn[6607]: UDPv4 link remote: [AF_INET]d.d.d.d:8757
May  6 21:27:54 cerberus openvpn[6607]: TLS: Initial packet from [AF_INET]d.d.d.d:8757, sid=cc2290c5 ee907b49
May  6 21:27:54 cerberus openvpn[6607]: VERIFY OK: depth=1, C=US, ST=California, L=Beverly Hills, O=ACME CORPORATION, OU=Anvil Department, CN=ca-certificate
May  6 21:27:54 cerberus openvpn[6607]: Validating certificate key usage
May  6 21:27:54 cerberus openvpn[6607]: ++ Certificate has key usage  00a0, expects 00a0
May  6 21:27:54 cerberus openvpn[6607]: VERIFY KU OK
May  6 21:27:54 cerberus openvpn[6607]: Validating certificate extended key usage
May  6 21:27:54 cerberus openvpn[6607]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
May  6 21:27:54 cerberus openvpn[6607]: VERIFY EKU OK
May  6 21:27:54 cerberus openvpn[6607]: VERIFY X509NAME OK: C=US, ST=California, L=Beverly Hills, O=ACME CORPORATION, OU=Anvil Department, CN=deathy.tagtail
May  6 21:27:54 cerberus openvpn[6607]: VERIFY OK: depth=0, C=US, ST=California, L=Beverly Hills, O=ACME CORPORATION, OU=Anvil Department, CN=deathy.tagtail
May  6 21:27:54 cerberus openvpn[6607]: Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
May  6 21:27:54 cerberus openvpn[6607]: Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
May  6 21:27:54 cerberus openvpn[6607]: Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
May  6 21:27:54 cerberus openvpn[6607]: Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
May  6 21:27:54 cerberus openvpn[6607]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
May  6 21:27:54 cerberus openvpn[6607]: [deathy.tagtail] Peer Connection Initiated with [AF_INET]d.d.d.d:8757
May  6 21:27:57 cerberus openvpn[6607]: SENT CONTROL [deathy.tagtail]: 'PUSH_REQUEST' (status=1)
May  6 21:27:57 cerberus openvpn[6607]: PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.9.0.1,redirect-gateway def1,block-outside-dns,route 10.9.0.0 255.255.255.0,topology net30,ping 1800,ping-restart 3600,ifconfig 10.9.0.18 10.9.0.17,peer-id 3'
May  6 21:27:57 cerberus openvpn[6607]: Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: block-outside-dns (2.3.14)
May  6 21:27:57 cerberus openvpn[6607]: OPTIONS IMPORT: timers and/or timeouts modified
May  6 21:27:57 cerberus openvpn[6607]: OPTIONS IMPORT: --ifconfig/up options modified
May  6 21:27:57 cerberus openvpn[6607]: OPTIONS IMPORT: route options modified
May  6 21:27:57 cerberus openvpn[6607]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
May  6 21:27:57 cerberus openvpn[6607]: OPTIONS IMPORT: peer-id set
May  6 21:27:57 cerberus openvpn[6607]: OPTIONS IMPORT: adjusting link_mtu to 1573
May  6 21:27:57 cerberus openvpn[6607]: ROUTE_GATEWAY c.c.c.c
May  6 21:27:57 cerberus openvpn[6607]: TUN/TAP device ovpnc1 exists previously, keep at program end
May  6 21:27:57 cerberus openvpn[6607]: TUN/TAP device /dev/tun1 opened
May  6 21:27:57 cerberus openvpn[6607]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
May  6 21:27:57 cerberus openvpn[6607]: /sbin/ifconfig ovpnc1 10.9.0.18 10.9.0.17 mtu 1500 netmask 255.255.255.255 up
May  6 21:27:57 cerberus openvpn[6607]: /usr/local/sbin/ovpn-linkup ovpnc1 1500 1573 10.9.0.18 10.9.0.17 init
May  6 21:27:57 cerberus openvpn[6607]: /sbin/route add -net d.d.d.d c.c.c.c 255.255.255.255
May  6 21:27:57 cerberus openvpn[6607]: /sbin/route add -net 0.0.0.0 10.9.0.17 128.0.0.0
May  6 21:27:57 cerberus openvpn[6607]: /sbin/route add -net 128.0.0.0 10.9.0.17 128.0.0.0
May  6 21:27:57 cerberus openvpn[6607]: /sbin/route add -net 10.9.0.0 10.9.0.17 255.255.255.0
May  6 21:27:57 cerberus openvpn[6607]: Initialization Sequence Completed
May  6 21:27:57 cerberus openvpn[10623]: OpenVPN 2.3.14 amd64-portbld-freebsd10.3 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Feb 15 2017
May  6 21:27:57 cerberus openvpn[10623]: library versions: OpenSSL 1.0.1s-freebsd  1 Mar 2016, LZO 2.09
May  6 21:27:57 cerberus openvpn[10626]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May  6 21:27:57 cerberus openvpn[10626]: Control Channel Authentication: using '/var/etc/openvpn/server2.tls-auth' as a OpenVPN static key file
May  6 21:27:57 cerberus openvpn[10626]: TUN/TAP device ovpns2 exists previously, keep at program end
May  6 21:27:57 cerberus openvpn[10626]: TUN/TAP device /dev/tun2 opened
May  6 21:27:57 cerberus openvpn[10626]: do_ifconfig, tt->ipv6=1, tt->did_ifconfig_ipv6_setup=0
May  6 21:27:57 cerberus openvpn[10626]: /sbin/ifconfig ovpns2 10.36.67.1 10.36.67.2 mtu 1500 netmask 255.255.255.0 up
May  6 21:27:57 cerberus openvpn[10626]: /usr/local/sbin/ovpn-linkup ovpns2 1500 1570 10.36.67.1 255.255.255.0 init
May  6 21:27:57 cerberus openvpn[10626]: UDPv4 link local (bound): [AF_INET]b.b.b.b:636
May  6 21:27:57 cerberus openvpn[10626]: UDPv4 link remote: [undef]
May  6 21:27:57 cerberus openvpn[10626]: Initialization Sequence Completed
May  6 21:27:59 cerberus openvpn[6607]: MANAGEMENT: Client connected from /var/etc/openvpn/client1.sock
May  6 21:27:59 cerberus openvpn[6607]: MANAGEMENT: CMD 'state 1'
May  6 21:27:59 cerberus openvpn[6607]: MANAGEMENT: CMD 'status 2'
May  6 21:27:59 cerberus openvpn[6607]: MANAGEMENT: Client disconnected

TinCanTech

fidesachates wroteCan anyone help or point me in the right direction?

Try here https://aws.amazon.com/contact-us/?nc1=f_m

fidesachates

TinCanTech wrote
fidesachates wroteCan anyone help or point me in the right direction?
Try here https://aws.amazon.com/contact-us/?nc1=f_m

What are you implying? As I said, it doesn't make sense for it to be a CPU issue. It doesn't matter sense to be a bandwidth issue either because my upload speeds reach 90 Mbps which indicates the instance has that bandwidth.

Can you elaborate your theory or reasoning so I can have a more directed question for the AWS team?

Pippin

MULTI: packet dropped due to output saturation (multi_process_incoming_tun)

https://openvpn.net/archive/openvpn-users/2005-07/msg00247.html

I too suspect it`s related to the T2.
Maybe it is related to their "CPU credits" ?
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/t2-instances.html

Or specs:
t2.micro:
Networking Performance Low to Moderate
https://aws.amazon.com/ec2/instance-types/

fidesachates

Pippin wrote
MULTI: packet dropped due to output saturation (multi_process_incoming_tun)
https://openvpn.net/archive/openvpn-users/2005-07/msg00247.html

I too suspect it`s related to the T2.
Maybe it is related to their "CPU credits" ?
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/t2-instances.html

Or specs:
t2.micro:
Networking Performance Low to Moderate
https://aws.amazon.com/ec2/instance-types/

Thank you for your thoughts. I had come across all your links before, but I having put them together in the recent light, I re-evaluated their relevance. I added cpu credit monitoring and found that I'm currently at over 100 cpu credits which is more than enough to allow me to burst to 100% cpu for over an hour of speed tests.

Your point about the specs of the t2 were also something I consider to be a likely cause, but the problem is I can't measure any bottleneck in memory, cpu, or disk. I don't want to spend any energy or resource into migrating to a m instance without any evidence that it will help. Do you think there is some performance metric I'm not measuring?