Worker threads vs shared SSL_CTX: handshake latency under concurrent TLS load
A design is being evaluated where an application uses worker threads with libssl/libcrypto, a single process-wide SSL_CTX for configuration, and a separate SSL object per network connection. The goal is to keep TLS configuration immutable and shared while connection state remains per-connection. OpenSSL 1.1.0+ documents thread safety around the split between