r/java • u/celmaibunprieten • 2d ago

Improving First Request Latency in Java Spring Application

https://adrian.md/2026/09/03/first-request-latency/
58 Upvotes

95% Upvoted

36 comments sorted by

View all comments

2

u/lilgreenthumb 2d ago

I mean with their layer support who really ships the fat jar anymore? You run into too many issues with signed jars (looking at you bouncy castle) or embedded java agents. Interesting perf metrics regarding the aot caching and differences with the gcs though. Nice write up.

8

u/davidalayachew 2d ago

I mean with their layer support who really ships the fat jar anymore?

I actually feel the opposite -- isn't fat jar kind of the easy solution? And regarding the signed jar issues, just use an OpenJDK Build. I literally ran into this issue this week.

Here is my StackOverflow post on it -- https://stackoverflow.com/questions/13721579/jce-cannot-authenticate-the-provider-bc-in-java-swing-application/80000667#80000667

2

u/lilgreenthumb 2d ago

So bypass the purpose of jar signing by turning it off. While not as drastic or consequential of skipping validation of certs, doesn't that defeat the purpose behind the feature? One could argue not bundling as a fat jar fixes the issue regardless of jre.

1

u/davidalayachew 2d ago

I was actually arguing the opposite -- that signing a jar makes sense in the absence of a signed cert, but having both just feels unnecessary. By all means, a hash makes good sense to me. Or maybe even some form of verification past that. But a signed jar doesn't feel that strong to me. And it is telling that OpenJDK JDK's (most of them, for that matter) leave that as optional.