[GEODE-8349] reinstate use of SSLSocket for cluster communication

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Component/s: membership, messaging
• Labels: no-release-note pull-request-available
• Assignee: Bruce J Schuchardt
• Reporter: Bruce J Schuchardt
• Created: 09/Jul/20 17:41
• Updated: 01/Sep/20 14:44
• Resolved: 01/Sep/20 14:43

Description

We've found problems with "new IO"'s SSLEngine with respect to support for TLSV1.  We've also seen anomalous performance using that secure communications mechanism.  The introduction of the use of the "new IO" SSLEngine was originally to 1) reduce code complexity in the org.apache.geode.internal.tcp package and 2) to set the stage for its use in client/server communications so that selectors could be used in c/s communications.

This ticket aims to reintroduce the use of SSLSocket in cluster communications without restoring the old, poorly tested SSL code paths.  The new implementation should have as good or better performance than the previous"old IO" implementation and the more recent "new IO" SSLEngine implementation as well.  This should be apparent in the CI benchmark jobs.

 

 

Issue Links

• links to: GitHub Pull Request #5363