akka / akka/akka-http

Allow using a native TLS library

Open
#1,985 1 comment 1 reaction 0 assignees View on GitHub
1 - triaged t:core
Dominant language
Scala
Stars
1.4k
Forks
584
Avg merge
14h 33m
Merged PRs (30d)
24

Description

When using akka-http with TLS, we currently use the JRE TLS implementation.

While this is already quite good, on some platforms plugging in a native TLS implementation can give some additional performance. We could use the Netty 'tcnative' implementation (https://github.com/akka/akka-http/pull/736) or https://github.com/google/conscrypt .

Conscrypt seems be much more elegant to include, but when I tried to use version 1.1.0 to back an akka-http server, `curl` requests worked fine but a `gatling` test suite would have only one successful request and many timeouts.

Contributor guide

Open the contributing guide

Research direction

Start by examining how akka-http currently uses the JRE TLS implementation and compare the proposed Netty tcnative and Conscrypt options. Reproduce the reported Conscrypt behavior with curl and the Gatling test suite. Done should mean a native TLS implementation can be used without the described request timeouts.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, scala
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.