Allow using a native TLS library
- Dominant language
- Scala
- Stars
- 1.4k
- Forks
- 584
- Avg merge
- 14h 33m
- Merged PRs (30d)
- 24
Description
When using akka-http with TLS, we currently use the JRE TLS implementation.
While this is already quite good, on some platforms plugging in a native TLS implementation can give some additional performance. We could use the Netty 'tcnative' implementation (https://github.com/akka/akka-http/pull/736) or https://github.com/google/conscrypt .
Conscrypt seems be much more elegant to include, but when I tried to use version 1.1.0 to back an akka-http server, `curl` requests worked fine but a `gatling` test suite would have only one successful request and many timeouts.
Contributor guide
Research direction
Start by examining how akka-http currently uses the JRE TLS implementation and compare the proposed Netty tcnative and Conscrypt options. Reproduce the reported Conscrypt behavior with curl and the Gatling test suite. Done should mean a native TLS implementation can be used without the described request timeouts.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, scala
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100