Over the weekend we applied SSL to a Tomcat 6 instance that runs a JSF/Guice application. After the update, we're noticing OutOfMemory exceptions on the machine and it has effectively gotten to a crawl in performance. The application hasn't changed so it's hard to suggest that's the problem. I imagine that SSL adds overhead to Tomcat but I wouldn't have thought it would be this bad. Can anyone suggest a place or two to investigate? I'm at a loss on where to look right now.