There should be some catch in the setup. Maybe the CPUs he used are old and don't support hardware AES acceleration?
I just run iperf3 over OpenVPN / UDP with AES-256-GCM between two servers in the same DC (but different rooms, through their public network, 1gE links) and got an average of 750MBits/sec. I don't have any special setting.