public SSLEngine createSslEngine(String peerHost, int peerPort) {
        if (sslEngineFactory == null) {
            throw new IllegalStateException("SslFactory has not been configured.");
        }
        if (connectionMode == ConnectionMode.SERVER) {
            return sslEngineFactory.createServerSslEngine(peerHost, peerPort);
        } else {
            return sslEngineFactory.createClientSslEngine(peerHost, peerPort, endpointIdentification);
        }
    }
Prefer `createSslEngine(Socket)` if a `Socket` instance is available. If using this overload,
avoid reverse DNS resolution in the computation of `peerHost`.
clients/src/main/java/org/apache/kafka/common/security/ssl/SslFactory.java