Preliminary research

CDN Tsunami: Exploiting HTTP/3-HTTP/1.1 Conversion for DoS Attacks

Ziyu Lin, Tianlong Su, Yingjie Lin, Prosanta Gope, Yinzhi Cao, Ximeng Liu and Biplab Sikdar · arXiv

AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.

Measures CDN-to-origin amplification when compact HTTP/3 headers expand into HTTP/1.1 and slow request bodies retain backend connections. Experiments across six providers compare QPACK tables, stream limits, fan-out and buffering, explaining the deployment conditions behind bandwidth and connection exhaustion.

Record

Researcher

Ziyu Lin, Tianlong Su, Yingjie Lin, Prosanta Gope, Yinzhi Cao, Ximeng Liu and Biplab Sikdar

Published by

arXiv

In the archive

• Collected in the 2026 preliminary research sweep

Tags

• http3
• http
• dos
• cdn
• algorithmic-complexity
• measurement-study
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Ziyu Lin, Tianlong Su, Yingjie Lin, Prosanta Gope, Yinzhi Cao, Ximeng Liu and Biplab Sikdar, first published at the original source. Preserved copies are kept so the citation survives its host.