Oracle数据库初始SSL握手性能优化求助

• 核心现象：首次调用HTTPS URL时存在10秒以上的显著延迟，后续调用同一URL主机时耗时不足0.5秒
• 调试定位：开启Java DEBUG=ALL后，发现"keyLimits"阶段存在9-10秒延迟，该阶段结束后Java输出大量忽略禁用及不支持密码套件的日志
• 无效尝试：设置jdk.tls.client.cipherSuites与jdk.tls.server.cipherSuites以减少密码套件数量，反而导致情况恶化
• 环境版本：Java版本为19.0.0.0.240116

相关调试日志 #

javax.net.ssl|FINE|01|Root Thread|2024-02-23 11:35:17.663 GMT-06:00|SSLContextImpl.java:425|System property jdk.tls.client.cipherSuites is set to 'null'

javax.net.ssl|FINE|01|Root Thread|2024-02-23 11:35:17.716 GMT-06:00|SSLContextImpl.java:425|System property jdk.tls.server.cipherSuites is set to 'null'

javax.net.ssl|FINE|01|Root Thread|2024-02-23 11:35:26.034 GMT-06:00|SSLCipher.java:438|jdk.tls.keyLimits:  entry = AES/GCM/NoPadding KeyUpdate 2^37. AES/GCM/NOPADDING:KEYUPDATE = 137438953472

javax.net.ssl|FINE|01|Root Thread|2024-02-23 11:35:27.554 GMT-06:00|SSLContextImpl.java:399|Ignore disabled cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA

javax.net.ssl|ALL|01|Root Thread|2024-02-23 11:35:27.560 GMT-06:00|SSLContextImpl.java:408|Ignore unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA

javax.net.ssl|FINE|01|Root Thread|2024-02-23 11:35:27.567 GMT-06:00|SSLContextImpl.java:399|Ignore disabled cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

javax.net.ssl|ALL|01|Root Thread|2024-02-23 11:35:27.570 GMT-06:00|SSLContextImpl.java:408|Ignore unsupported cipher suite: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA


SQL> exec dbms_output.put_line(dbms_java.getversion)
19.0.0.0.240116

内容的提问来源于stack exchange，提问作者user3208340