Merge pull request #16493 from vespa-engine/balder/crypto-buffer-64k-2-32k

Reduce wrap buffers from 64k to 32k

1 files changed, 2 insertions, 2 deletions

diff --git a/jrt/src/com/yahoo/jrt/TlsCryptoSocket.java b/jrt/src/com/yahoo/jrt/TlsCryptoSocket.java
index 08c9d1138dd..56d096347b3 100644
--- a/jrt/src/com/yahoo/jrt/TlsCryptoSocket.java
+++ b/jrt/src/com/yahoo/jrt/TlsCryptoSocket.java
@@ -52,8 +52,8 @@ public class TlsCryptoSocket implements CryptoSocket {
         this.channel = channel;
         this.sslEngine = sslEngine;
         SSLSession nullSession = sslEngine.getSession();
-        this.wrapBuffer = new Buffer(Math.max(0x10000, nullSession.getPacketBufferSize() * 2));
-        this.unwrapBuffer = new Buffer(Math.max(0x10000, nullSession.getPacketBufferSize() * 2));
+        this.wrapBuffer = new Buffer(Math.max(0x8000, nullSession.getPacketBufferSize()));
+        this.unwrapBuffer = new Buffer(Math.max(0x8000, nullSession.getPacketBufferSize()));
         // Note: Dummy buffer as unwrap requires a full size application buffer even though no application data is unwrapped
         this.handshakeDummyBuffer = ByteBuffer.allocate(nullSession.getApplicationBufferSize());
         this.handshakeState = HandshakeState.NOT_STARTED;