[HADOOP-15813] Enable more reliable SSL connection reuse

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.10.0, 3.0.4, 3.3.0, 2.8.6, 3.2.1, 2.9.3, 3.1.3
• Component/s: common
• Target Version/s: 2.8.5
• Assignee: Daryn Sharp
• Reporter: Daryn Sharp
• Created: 02/Oct/18 20:35
• Updated: 21/Feb/19 02:50
• Resolved: 21/Feb/19 02:33

Description

The java keep-alive cache relies on instance equivalence of the SSL socket factory.  In many java versions, SSLContext#getSocketFactory always returns a new instance which completely breaks the cache.  Clients flooding a service with lingering per-request connections that can lead to port exhaustion.  The hadoop SSLFactory should cache the socket factory associated with the context.