Tagged articles

HPACK

4 articles · Page 1 of 1

Jun 4, 2026 · Information Security

Hidden HTTP/2 Bomb Discovered by Codex Can Cripple Millions of Servers

The Codex team uncovered a new HTTP/2 bomb that exploits HPACK compression and a zero‑byte window stall, allowing an attacker with just 100 Mbps bandwidth to consume up to 32 GB of memory on vulnerable servers such as nginx, Apache, IIS, Envoy and Cloudflare Pingora within seconds, and the article details the attack mechanics, historical context, disclosure timeline, and mitigation strategies.

DOSEnvoyHPACK

0 likes · 12 min read

Hidden HTTP/2 Bomb Discovered by Codex Can Cripple Millions of Servers

vivo Internet Technology

Feb 22, 2021 · Fundamentals

Comprehensive Overview of HTTP/2: Connection Setup, Frames & Streams, HPACK Compression, Server Push, Flow Control, and Open Issues

The article thoroughly explains HTTP/2, detailing its optional clear‑text or TLS connection setup, multiplexed frames and streams, HPACK header compression, server‑push mechanism, application‑layer flow control, and the protocol’s lingering challenges such as TLS handshake latency and TCP head‑of‑line blocking that HTTP/3 seeks to resolve.

Flow ControlHPACKHTTP/2

0 likes · 21 min read

Comprehensive Overview of HTTP/2: Connection Setup, Frames & Streams, HPACK Compression, Server Push, Flow Control, and Open Issues

360 Zhihui Cloud Developer

Apr 4, 2019 · Backend Development

How HTTP/2 Header Compression and Server Push Boost Web Performance

This article explains HTTP/2’s new features—HPACK header compression using static and dynamic tables with Huffman coding, and Server Push via PUSH_PROMISE frames—detailing how they reduce bandwidth, improve latency, and the underlying stream state machine, illustrated with code snippets and diagrams.

GolangHPACKHeader Compression

0 likes · 11 min read

How HTTP/2 Header Compression and Server Push Boost Web Performance

360 Tech Engineering

Mar 22, 2019 · Fundamentals

Understanding HTTP/2 Header Compression (HPACK) and Server Push

This article explains HTTP/2's header compression using the HPACK format—including static and dynamic tables, Huffman coding, and literal encoding—and the Server Push mechanism with PUSH_PROMISE frames, illustrating how these features reduce bandwidth and improve request latency.

HPACKHTTP/2Header Compression

0 likes · 11 min read

Understanding HTTP/2 Header Compression (HPACK) and Server Push