Collected research

CDN Judo: Breaking the CDN DoS Protection with Itself

Run Guo, Weizhong Li, Baojun Liu, Shuang Hao, Jia Zhang, Haixin Duan, Kaiwen Sheng, Jianjun Chen and Ying Liu · NDSS Symposium

Weaknesses in how CDNs forward requests let an attacker turn the CDN's own capacity against the site it shields: HTTP/2 request conversion and pre-POST forwarding exhaust CDN-to-origin bandwidth and origin connection limits, and because some vendors forward from a few long-lived IPs, cutting those connections degrades global availability.

Record

Researcher

Run Guo, Weizhong Li, Baojun Liu, Shuang Hao, Jia Zhang, Haixin Duan, Kaiwen Sheng, Jianjun Chen and Ying Liu

Published by

NDSS Symposium

Topic

HTTP

In the archive

• Collected in the 2020 research round

Related sources

• NDSS2020 - CDN Judo: Breaking the CDN DoS Protection with Itself
• NDSS2020 - CDN Judo: Breaking the CDN DoS Protection with Itself

Tags

• dos
• cdn
• http2
• http
• reverse-proxy
• measurement-study

This page is the archive's own catalogue record. The research is the work of Run Guo, Weizhong Li, Baojun Liu, Shuang Hao, Jia Zhang, Haixin Duan, Kaiwen Sheng, Jianjun Chen and Ying Liu, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 19 August 2026.