Summary

Update the default value for the maximum number of entries in the SSL session cache (SSLSessionContext.getSessionCacheSize()).

Problem

The default value for the maximum number of entries in the SSL session cache (SSLSessionContext.getSessionCacheSize()) is infinite, and the entry timeout is 24 hours. With larger heaps, applications are running into situations where the cache ends up with several million entries at the 24 hour mark, at which time many of them are invalidated at almost the same time, which can result in multi-minute pauses, which are effectively service failures.

However, no matter what the default value is, it will not fit perfectly in all situations.

Solution

Update to use a default maximum session cache size other than infinite in JDK.

Specification

Update the SunJSSE provider to use 20480 as the default session cache size for SSLSessionContext.