Unable to get access to OpenSearch Dashboards through vpn

I have an Open Search service set up with a VPC and I trying to access opensearch dashboards through vpn but i get time out every time. I don't have anymore ideas as to why it is not connecting. I tested my vpc domain through sshing into the server through proxy with this guide: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html#vpc-security and that is the only way i have access to dashboards, but proxy doesn't fit my use case so i don't want to use it. i do have a full config in my cloudformation temaplate that i can provide if needed.

my domain config:

 "OpenSearchDomain": {
            "Type": "AWS::OpenSearchService::Domain",
            "Properties": {
                "DomainName": "stage",
                "EngineVersion": "OpenSearch_1.3",
                "ClusterConfig": {
                    "InstanceCount": 3,
                    "ZoneAwarenessEnabled": true,
                    "ZoneAwarenessConfig": {
                        "AvailabilityZoneCount": 3
                    },
                    "InstanceType": "t3.small.search"
                },
                "EBSOptions": {
                    "EBSEnabled": true,
                    "VolumeSize": "20",
                    "VolumeType": "gp2"
                },
                "EncryptionAtRestOptions": {
                    "Enabled": true
                },
                "OffPeakWindowOptions": {
                    "Enabled": true,
                    "OffPeakWindow": {
                        "WindowStartTime": {
                            "Hours": 0,
                            "Minutes": 0
                        }
                    }
                },
                "SoftwareUpdateOptions": {
                    "AutoSoftwareUpdateEnabled": true
                },
                "AccessPolicies": {
                    "Version": "2012-10-17",
                    "Statement": [
                        {
                            "Effect": "Allow",
                            "Principal": "*",
                            "Action": "es:ESHttp*",
                            "Resource": [
                                {
                                    "Fn::Sub": "arn:aws:es:${AWS::Region}:${AWS::AccountId}:domain/stage/*"
                                }
                            ]
                        }
                    ]
                },
                "AdvancedOptions": {
                    "rest.action.multi.allow_explicit_index": false
                },
                "VPCOptions": {
                    "SubnetIds": [
                        {
                            "Ref": "PrivateSubnetA"
                        },
                        {
                            "Ref": "PrivateSubnetB"
                        },
                        {
                            "Ref": "PrivateSubnetC"
                        }
                    ],
                    "SecurityGroupIds": [
                        {
                            "Ref": "SecurityGroup"
                        }
                    ]
                }
            }
        }

VPN conifg:

"SecurityGroupVPNAccess": {
            "Type": "AWS::EC2::SecurityGroupIngress",
            "Properties": {
                "Description": "VPN Access",
                "CidrIp": "10.12.0.0/16",
                "FromPort": 0,
                "GroupId": {
                    "Ref": "SecurityGroup"
                },
                "IpProtocol": "tcp",
                "ToPort": 65535
            },
            "DependsOn": [
                "SecurityGroup"
            ]
        },