few performance ideas

[Jarred-Sumner]

• For BoringSSL, have you looked at if using TLS_with_buffers_method has any performance improvements over TLS_METHOD + TLS_METHOD?
• For HTTP/1.1 parsing, have you looked at if using picohttpparser improves the performance? When running http_load_test, much of the time is spent on reading http headers and that's something picohttpparser does very quickly because it uses SIMD
• For async DNS, have you looked at the very old CFNetworking APIs for this? The Networking.framework APIs are newer but I think would require linking more objective-c frameworks and that can cause boot performance to suffer

[ghost]

CRYPTO_BUFFER sounds very interesting - lowering memory usage per SSL connection is welcome.

Re picohttpparser - we have a similar approach with SIMD usage already. Re DNS - we cannot import dependencies like that and there is no need, we just need to put that blocking lookup in a thread and hide it for the user.