Improve SSL performance with Java 8 for Wowza Streaming Engine

The GCM algorithms used by default in Java 8 don't use hardware acceleration, unlike the algorithms used in earlier versions of Java. Therefore, it's normal to see a significant reduction in performance of the default algorithm configurations using in Wowza Streaming Engine™ media server software. This article describes two ways to disable the newer, slower algorithms in Java 8.

Use a custom java.security file (recommended)


If you don't want to modify the default java.security file in the java_home location, you can create a custom java.security file to modify the jdk.tls.disabledAlgorithms property. 

  1. Create a new java.security file in a location of your choosing.
  2. Set jdk.tls.disabledAlgorithms=GCM.
  3. Save your changes.
  4. Open the [wowza-install-dir]/conf/Tune.xml file in a text editor.
  5. In the <VMOptions> section, add <VMOption>-Djava.security.properties=[custom-java.security-path]/java.security</VMOption>, and save your changes.

Update the java_home java.security file


Notes:

  • If you completed the steps in Use a custom java.security file (recommended), you've already disabled the algorithms. No further action is required.
  • With this method, you may have to reapply the changes if you update or reinstall Java.

You can also disable the slower GCM algorithms in Java 8 in the java_home version of the java.security file.

  1. Open [java_home]/lib/security/java.security in a text editor.
  2. Add the value GCM to the jdk.tls.disabledAlgorithms property.
  3. Save your changes.