Preliminary research

CDN Tsunami: Exploiting HTTP/3-HTTP/1.1 Conversion for DoS Attacks

Ziyu Lin, Tianlong Su, Yingjie Lin, Prosanta Gope, Yinzhi Cao, Ximeng Liu and Biplab Sikdar · arXiv

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Measures CDN-to-origin amplification when compact HTTP/3 headers expand into HTTP/1.1 and slow request bodies retain backend connections. Experiments across six providers compare QPACK tables, stream limits, fan-out and buffering, explaining the deployment conditions behind bandwidth and connection exhaustion.

Record

Researcher

Ziyu Lin, Tianlong Su, Yingjie Lin, Prosanta Gope, Yinzhi Cao, Ximeng Liu and Biplab Sikdar

Published by

arXiv

In the archive

• Collected in the 2026 preliminary research sweep

Tags

• http3
• http
• dos
• cdn
• algorithmic-complexity
• measurement-study
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Ziyu Lin, Tianlong Su, Yingjie Lin, Prosanta Gope, Yinzhi Cao, Ximeng Liu and Biplab Sikdar, first published at the original source. Preserved copies are kept so the citation survives its host.