You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Daryn Sharp (JIRA)" <ji...@apache.org> on 2018/10/02 20:36:00 UTC

[jira] [Created] (HADOOP-15813) Enable more reliable SSL connection reuse

Daryn Sharp created HADOOP-15813:
------------------------------------

             Summary: Enable more reliable SSL connection reuse
                 Key: HADOOP-15813
                 URL: https://issues.apache.org/jira/browse/HADOOP-15813
             Project: Hadoop Common
          Issue Type: Bug
          Components: common
    Affects Versions: 2.6.0
            Reporter: Daryn Sharp


The java keep-alive cache relies on instance equivalence of the SSL socket factory.  In many java versions, SSLContext#getSocketFactory always returns a new instance which completely breaks the cache.  Clients flooding a service with lingering per-request connections that can lead to port exhaustion.  The hadoop SSLFactory should cache the socket factory associated with the context.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org