sun.security.pkcs11.SessionManager does synchronized access to Session pools, that became a huge scalability blocker on T4.
Patch is suggested.
The attached webrev.zip contain suggested patch, where Session pools are done with concurrent collections.
As result we got (on T4-4):
SPECjvm2008:crypto.rsa - 7x times boost,
SPECjvm2008:crypto.signverify - 2.5x times boost,
SPECjbb2012(encrupted transport) - 2.7x times boost.