jetty / jetty.project

Eclipse Jetty® - Web Container & Clients - supports HTTP/2, HTTP/1.1, HTTP/1.0, websocket, servlets, and more
https://eclipse.dev/jetty
Other
3.86k stars 1.91k forks source link

Fixed #12284 - Excessive heap consumption by SSLSessionImpl by Jetty Server with TLS 1.3 and long-lived client. #12288

Closed sbordet closed 1 month ago

sbordet commented 1 month ago

Now SslSessionData is stored as a field, rather than in the SSLSession as an attribute. This implies a little more cost to create the SslSessionData per connection rather than per SSLSession, but it should be negligible.

Now SslSessionData cannot be retrieved as a SSLSession attribute, but we have explicit APIs to retrieve it, so it should not be a problem.