In Apache ActiveMQ Artemis, the issue ARTEMIS-1649 added support for Netty to use OpenSSL as the TLS provider (this change was later enhanced via issues ARTEMIS-1746 and ARTEMIS-1913).

As well as the reasons stated in the given JIRA (to allow for configurations of TLS not supported by Java's native provider), the use of the OpenSSL implementation has demonstrated massively improved TLS performance (especially so on Java 8 - where throughput improvements of the order of 30% and significantly reduced CPU load have been observed).

Improved TLS performance can be especially important on deployments to OpenShift requiring external connectivity.

Can we validate this configuration for an AMQ Broker release and add appropriate documentation / guidance?