Collected research

Forwarding-Loop Attacks in Content Delivery Networks

Jianjun Chen, Jian Jiang, Xiaofeng Zheng, Haixin Duan, Jinjin Liang, Kang Li, Tao Wan and Vern Paxson · ndss-symposium.org

A malicious CDN customer can point its origin back into the CDN so that one request loops inside a single CDN or between several, being processed over and over and consuming edge and origin resources. Header-filtering features offered by some CDNs strip the markers others use to detect loops, so existing defences are bypassable; all 16 commercial CDNs tested were vulnerable.

Record

Researcher

Jianjun Chen, Jian Jiang, Xiaofeng Zheng, Haixin Duan, Jinjin Liang, Kang Li, Tao Wan and Vern Paxson

Published by

ndss-symposium.org

Format

Whitepaper

Topic

Other

In the archive

• Collected in the 2016–17 research round

Tags

• cdn
• dos
• http
• reverse-proxy
• cache
• filter-bypass
• measurement-study
• mitigation
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Jianjun Chen, Jian Jiang, Xiaofeng Zheng, Haixin Duan, Jinjin Liang, Kang Li, Tao Wan and Vern Paxson, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.