{"id":277,"date":"2011-06-12T12:38:14","date_gmt":"2011-06-12T12:38:14","guid":{"rendered":"https:\/\/kari.world.ikari.fi\/2011\/06\/12\/ssl-with-server-socket\/"},"modified":"2011-06-12T12:38:14","modified_gmt":"2011-06-12T12:38:14","slug":"ssl-with-server-socket","status":"publish","type":"post","link":"https:\/\/kari.world.ikari.fi\/?p=277","title":{"rendered":"SSL with server socket"},"content":{"rendered":"

Netty<\/a><\/p>\n

Need to investigate this a bit further, based into FAQ, it may have some support for SSL with server socket<\/a>.<\/p>\n

Btw, one really irritating fact of standard SSLServerSocket<\/a><\/code> implementation of java is that API launches new<\/b> handler thread<\/a> everytime when new SSL socket is created. It’s pretty clear that when having server with thousands of connections that adds ovehead for connection establishment.<\/p>\n

However, regarding scaling up java servers, traditional NIO selector loop in single thread doesn’t scale well. Reason is that such API originates from the era of slow single core CPUs, while current trend is reasonably fast, very many cores CPUs. Such model actually works better with sockets which are multithreaded, speed of single CPU core becomes quickly limiting factor if single thread is doing all the work via ”selector” loop.<\/p>\n

Update 3.7.2011<\/b>
\nBouncyCastle – Add support for DEFLATE compression to TLS<\/a>
\nHowever, sadly, there aint’ any hope of getting support in real life any time soon, since fixes in java ZIP flush logic are done only in JRE7, and since it’s just being released, it will take few stabilization releases until it’s safe to put into real production use (Read: ~1 year, until safe to take into use.<\/p>\n

Wikipedia – Comparison of TLS Implementations<\/a><\/p>\n

Update 5.7.2011<\/b>
\nBouncy Castle – TLS now supports compression (v1.46)<\/a>
\nOkey, if that’s truly true, then that is<\/b> interesting. Need to investigate a bit.<\/p>\n

References:<\/b>
\nNetty: SecureChat example<\/a>
\nApache MINA<\/a>
\nMINA vs Netty \u2013 A User\u2019s perspective [Part 1]<\/a>
\nStackoverflow: Netty vs Apache MINA<\/a>
\nKari’s World: NIO + SSL + ServerSocket == wtf?!?<\/a>
\nKari’s World: Use only max 8KB IO buffer?!?<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Netty Need to investigate this a bit further, based into FAQ, it may have some support for SSL with server socket. Btw, one really irritating fact of standard SSLServerSocket implementation of java is that API launches new handler thread everytime when new SSL socket is created. It’s pretty clear that when having server with thousands…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-277","post","type-post","status-publish","format-standard","hentry","category-java"],"_links":{"self":[{"href":"https:\/\/kari.world.ikari.fi\/index.php?rest_route=\/wp\/v2\/posts\/277","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kari.world.ikari.fi\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kari.world.ikari.fi\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kari.world.ikari.fi\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kari.world.ikari.fi\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=277"}],"version-history":[{"count":0,"href":"https:\/\/kari.world.ikari.fi\/index.php?rest_route=\/wp\/v2\/posts\/277\/revisions"}],"wp:attachment":[{"href":"https:\/\/kari.world.ikari.fi\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kari.world.ikari.fi\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kari.world.ikari.fi\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}