Preliminary research

CDN Tsunami: Exploiting HTTP/3-HTTP/1.1 Conversion for DoS Attacks

Ziyu Lin, Tianlong Su, Yingjie Lin, Prosanta Gope, Yinzhi Cao, Ximeng Liu and Biplab Sikdar · arXiv

AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.

Measures CDN-to-origin amplification when compact HTTP/3 headers expand into HTTP/1.1 and slow request bodies retain backend connections. Experiments across six providers compare QPACK tables, stream limits, fan-out and buffering, explaining the deployment conditions behind bandwidth and connection exhaustion.

Record

Researcher

Ziyu Lin, Tianlong Su, Yingjie Lin, Prosanta Gope, Yinzhi Cao, Ximeng Liu and Biplab Sikdar

Published by

arXiv

Topic

HTTP

In the archive

• Collected in the 2026 preliminary research sweep

Tags

• http3
• http
• dos
• cdn
• algorithmic-complexity
• measurement-study
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Ziyu Lin, Tianlong Su, Yingjie Lin, Prosanta Gope, Yinzhi Cao, Ximeng Liu and Biplab Sikdar, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 13 September 2026.