[FLINK-9878] IO worker threads BLOCKED on SSL Session Cache while CMS full gc

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.0, 1.5.1, 1.6.0
• Fix Version/s: 1.5.4, 1.6.3, 1.7.0
• Component/s: Runtime / Network
• Labels: pull-request-available
• Assignee: Nico Kruber
• Reporter: Nico Kruber
• Created: 17/Jul/18 15:04
• Updated: 23/Oct/18 08:48
• Resolved: 22/Oct/18 13:45

Description

According to https://github.com/netty/netty/issues/832, there is a JDK issue during garbage collection when the SSL session cache is not limited. We should allow the user to configure this and further (advanced) SSL parameters for fine-tuning to fix this and similar issues. In particular, the following parameters should be configurable:

• SSL session cache size
• SSL session timeout
• SSL handshake timeout
• SSL close notify flush timeout

Issue Links

• is depended upon by: FLINK-9879 Find sane defaults for (advanced) SSL session parameters
• links to: GitHub Pull Request #6355
• links to: GitHub Pull Request #6355
• links to: GitHub Pull Request #6838
• links to: GitHub Pull Request #6895