diff --git a/handler/src/main/java/io/netty/handler/ssl/SslHandler.java b/handler/src/main/java/io/netty/handler/ssl/SslHandler.java index 2943290bdb..d4d7fdc9c1 100644 --- a/handler/src/main/java/io/netty/handler/ssl/SslHandler.java +++ b/handler/src/main/java/io/netty/handler/ssl/SslHandler.java @@ -142,6 +142,25 @@ import java.util.regex.Pattern; *
+ * Because of a known issue with the current implementation of the SslEngine that comes + * with Java it may be possible that you see blocked IO-Threads while a full GC is done. + *
+ * So if you are affected you can workaround this problem by adjust the cache settings + * like shown below: + * + *
+ * SslContext context = ...; + * context.getServerSessionContext().setSessionCacheSize(someSaneSize); + * context.getServerSessionContext().setSessionTime(someSameTimeout); + *+ *
+ * What values to use here depends on the nature of your application and should be set + * based on monitoring and debugging of it. + * For more details see + * #832 in our issue tracker. * @apiviz.landmark * @apiviz.uses io.netty.handler.ssl.SslBufferPool */