connection hang after some amount of data about authy-openvpn HOT 3 CLOSED

    RX packets 80669  bytes 63366673 (60.4 MiB)
    RX errors 0  dropped 0  overruns 0  frame 0
    TX packets 72866  bytes 47692318 (45.4 MiB)
    TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

    RX packets 86550  bytes 108562464 (103.5 MiB)
    RX errors 0  dropped 0  overruns 0  frame 0
    TX packets 46766  bytes 2486873 (2.3 MiB)
    TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

    RX packets 45531  bytes 2587063 (2.4 MiB)
    RX errors 0  dropped 0  overruns 0  frame 0
    TX packets 83212  bytes 104402447 (99.5 MiB)
    TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Wed Dec 21 18:18:02 2016 us=960278   renegotiate_bytes = -1
Wed Dec 21 18:18:02 2016 us=961046 OpenVPN 2.3.13 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Nov  3 2016

/**
 * Limit the reneg_bytes value when using a small-block (<128 bytes) cipher.
 *
 * @param cipher        The current cipher (may be NULL).
 * @param reneg_bytes   Pointer to the current reneg_bytes, updated if needed.
 *                      May *not* be NULL.
 */
static void
tls_limit_reneg_bytes(const cipher_kt_t *cipher, int *reneg_bytes)
{
    if (cipher && (cipher_kt_block_size(cipher) < 128/8))
    {
        if (*reneg_bytes == -1) /* Not user-specified */
        {
            msg(M_WARN, "WARNING: cipher with small block size in use, "
                "reducing reneg-bytes to 64MB to mitigate SWEET32 attacks.");
            *reneg_bytes = 64 * 1024 * 1024;
        }
    }
}

   /* Should we trigger a soft reset? -- new key, keeps old key for a while */
    if (ks->state >= S_ACTIVE
        && ((session->opt->renegotiate_seconds
             && now >= ks->established + session->opt->renegotiate_seconds)
            || (session->opt->renegotiate_bytes > 0
                && ks->n_bytes >= session->opt->renegotiate_bytes)
            || (session->opt->renegotiate_packets
                && ks->n_packets >= session->opt->renegotiate_packets)
            || (packet_id_close_to_wrapping(&ks->crypto_options.packet_id.send))))
    {
        msg(D_TLS_DEBUG_LOW,
            "TLS: soft reset sec=%d bytes=" counter_format "/%d pkts=" counter_format "/%d",
            (int)(ks->established + session->opt->renegotiate_seconds - now),
            ks->n_bytes, session->opt->renegotiate_bytes,
            ks->n_packets, session->opt->renegotiate_packets);
        key_state_soft_reset(session);
    }