Re: [10] RFR : 8186628 : SSL session cache can cause a scalability bottleneck

2017-11-07 Thread Bernd Eckenfels
Hello, There is already a property to set the cache size, would it be enough to re-purpose a cache size of 0 to turn it off? Are there numbers to show when this is actually a problem? Is this only for 100% Cache misses? Maybe the cache itself needs some optimizations? (It is hard to imagine th

Re: Draft design for Key Derivation API

2017-11-07 Thread Mike StJohns
Hi - I on a plane tomorrow so it may be a few days before I can completely answer the email, but I wanted to hit this section. Think of KeyDerivation as something that has a pattern similar to Cipher or KeyAgreement or Signature. The instantiation phase sets up the mechanism of the crypto obje

[10] RFR : 8186628 : SSL session cache can cause a scalability bottleneck

2017-11-07 Thread Ivan Gerasimov
Hello everybody! The class sun.security.ssl.SSLSessionContextImpl maintains caches for the sessions reuse. Access to the cache from threads is serialized. It was reported that under heavy load the time of waiting for the turn to access the synchronized methods outweighs the time of creating a

Re: Draft design for Key Derivation API

2017-11-07 Thread Jamil Nimeh
Hi Mike, thank you for your comments and feedback. I have a few comments and questions inline: On 11/06/2017 05:25 PM, Michael StJohns wrote: On 11/3/2017 4:59 PM, Jamil Nimeh wrote: Hello all, This is a review request for the draft of a new Key Derivation API. The goal of this API will b