David Mao created KAFKA-18167:
---------------------------------
Summary: Disable JDK session ticket extension by default
Key: KAFKA-18167
URL: https://issues.apache.org/jira/browse/KAFKA-18167
Project: Kafka
Issue Type: Task
Reporter: David Mao
Assignee: David Mao
JDK 14 enabled the TLS session ticket extension by default. This can cause
severe cpu regression with certain JDK distributions, see:
https://bugs.openjdk.org/browse/JDK-8298381 and adds some non-trivial CPU
overhead to TLS handshaking in other cases.
Since JDK 17 is now the minimum JDK version for broker deployments, we should
consider disabling TLS session tickets by default. This minimizes upgrade
friction for customers who may not be aware of these issues.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
