If you manage a large farm of servers then most probably you experienced performance problems time to time. To solve puppetmaster problems with handling many concurrent SSL connections the best solution is to switch from WEBrick to Apache2 as gateway for puppet agents.

We can recommend implemented by our team the puppet master module which uses our passenger module.

More details about problems with WEBrick you can find in issue here