We updated to 2.2.4 and were getting some connection failures for clients using TLS 1.3. Debugging it we noticed a new experimental non blocking SSL processor was enabled by default as part of 2.2.4. (See SslFilter.setUseNonBlockingPipeline and SslFilter.nonBlockingPipeline).
Turning this off with a call to set use nonblocking pipeline(false) to use the pre-2.2.4 handler got our TLS 1.3 clients connecting reliably again.