Studio Matrx Monthly · Volume 1 · Issue 4 · September 2026
Amogh N P
 In loving memory of Amogh N P — Architect · Designer · Visionary 
Roofs, Openings & DebrisLesson 4.3
Disaster-Resilient Design/Module 4 · Wind & Cyclone Design

Lesson 4.3 · Wind & Cyclone Design

Roofs, Openings & Debris

Roof uplift is the number-one cyclone failure - so the defence is a continuous chain of hold-downs from roof to foundation, protected openings, and a skin that survives flying debris

12 min Interactive lessonFree · open lessonByAmogh N P· Architect & interior designer
The hook

When a cyclone destroys a house it usually starts at the top: the roof lifts, and once the roof is gone the walls have lost what held them together.

Walk through any coast after a cyclone and the single most common sight is roofless buildings - walls still standing, the roof peeled away and flung a street or a field away. Roof uplift is the number-one structural failure in cyclones, and it is not hard to see why from the last two lessons: the wind sucks the roof upward from outside, and if the envelope is breached the pressurised air pushes it upward from inside, the two combining into an enormous lifting force on the one part of the building held down mainly by its own weight and its connections. Lose the roof and you lose far more than shelter: the roof was tying the tops of the walls together and bracing them, so once it goes the walls are left as free-standing cantilevers and the collapse accelerates.

The defence is not a heavier roof or a stronger wall in isolation - it is continuity. The uplift has to be carried by an unbroken chain that grips the roof covering, ties it to the rafters or trusses, anchors those to the walls, carries the force down the walls, and finally pins the whole building to its foundation and the ground. A cyclone tests every link in that chain at once and breaks it at the weakest. Alongside the roof, the openings must be defended - both because a breached opening pressurises the building and magnifies the very uplift we are fighting, and because the storm throws debris: sheets of roofing, branches, signboards and loose objects become missiles that smash unprotected glazing and start the breach. This lesson follows the hold-down chain from roof to foundation, and defends the openings against pressure and debris - deferring every connection capacity and fixing detail to IS 875 Part 3 and the engineer.

Uplift chain: covering -> rafters -> walls -> foundation -> ground. Break one link and the roof flies.

The failure

Why the roof goes first

The roof is the most exposed and the most vulnerable surface in a cyclone, and understanding why is the key to defending it. Three things conspire. First, the aerodynamics: as wind flows over a building it accelerates most sharply at the roof, creating the strongest suctions of anywhere on the skin - and those suctions peak viciously at the eaves, ridges, corners and edges where the flow separates. Second, the roof is held down mainly by gravity and its connections - unlike a wall, which has its own weight bearing down and the floors bracing it, a roof's dead weight is often modest and it relies on being positively tied down to resist being lifted. Third, if the envelope is breached (Lesson 4.2), internal pressure adds an upward push from inside, and the combined uplift can roughly double. A roof designed only for its weight, or tied with weak or corroded connections, simply lifts.

And the consequence cascades. The roof is not just shelter; structurally it usually acts as a diaphragm and a tie that holds the tops of the walls together and stops them splaying or buckling outward under lateral load. When the roof peels away, that bracing vanishes: the walls become tall free-standing cantilevers with nothing restraining their tops, and they topple or are blown out soon after. This is why post-cyclone surveys so often show the roof gone and then the walls collapsed - the roof failure was the first domino. Saving the roof often saves the whole building; losing it usually dooms the rest.

The design implication is blunt: the roof and its anchorage deserve the most careful attention of any part of a wind design, and the worst loads are at the edges and corners, not the middle. Eaves that the wind can get under, large unbraced overhangs, and light sheet roofing fixed with too few or corroded fasteners are the classic failure points. Heavy roofs resist uplift better by sheer weight but bring their own seismic penalties (a theme this course keeps balancing); light roofs are kinder in an earthquake but must be tied down hard against wind. Which roof, how heavy, and every connection capacity is an engineered, code-based decision - IS 875 Part 3 for the uplift, the engineer for the connections - but the principle the architect owns is that the roof is the battleground, its edges fail first, and it must be positively, continuously tied down.

groundupliftcovering fixingsroof-to-wall tiewall-to-foundationfoundation to groundunbrokenchain
Zoom
The continuous hold-down chain: uplift on the roof must be carried by an unbroken path of positive connections from the roof covering through the rafters to the walls and down to the foundation and ground - the chain is only as strong as its weakest link.

Roof suction peaks at eaves/ridges/corners + internal pressure = uplift. Lose the roof and the walls lose their brace.

The continuous hold-down chain: roof to foundation

The defence against uplift is a single idea repeated all the way down the building: a continuous load path for uplift, from the roof covering to the ground, with every link able to carry the force and pass it on. Trace it from the top. The roof covering (tiles, sheets, membrane) must be fixed to the structure below it well enough to resist suction - this is where peeling starts, so fixings are denser at edges and corners. The rafters or trusses must be tied to the walls or ring beam with positive connections - the straps, clips and anchors often called hold-downs or, in hurricane country, 'hurricane straps' - not merely resting under their own weight. The walls must carry the uplift (and the overturning) down their height without a weak storey or a broken joint. And the whole assembly must be anchored to the foundation and the foundation to the ground, so the uplift and overturning cannot simply lift or slide the building off its base. Each link is a place the chain can break, and the wind finds the weakest.

The governing truth is that the chain is only as strong as its weakest link. A superb roof-to-wall strap is worthless if the roof covering peels off above it, or if the wall-to-foundation anchorage lets go below it. This is why wind resilience is a continuity problem, not a component problem: you cannot buy safety by over-building one connection while another is an afterthought. The designer's job is to make sure the path is complete and consistent - that uplift has a carried route from the ridge to the soil with no missing or under-designed link.

Continuity also explains some classic mistakes. Additions and alterations that tap into an existing roof often break the original tie-down path. Gable ends and large overhangs are frequently the weak link because they are poorly tied and heavily loaded. Verandah and porch roofs tacked onto the main structure can be lifted and, in lifting, damage what they are attached to. In traditional and owner-built construction, roofs are often simply laid on and weighted rather than tied, which is exactly why they fly. The modern answer is positive, engineered connections forming an unbroken chain. The architect must design for that chain to exist - detailing connections at every junction, avoiding configurations that break the path - while the connection capacities, strap sizes and anchorage details come from the structural engineer to IS 875 Part 3. Draw the chain; let the engineer size each link.

groundupliftcovering fixingsroof-to-wall tiewall-to-foundationfoundation to groundunbrokenchain
Zoom
The continuous hold-down chain: uplift on the roof must be carried by an unbroken path of positive connections from the roof covering through the rafters to the walls and down to the foundation and ground - the chain is only as strong as its weakest link.
Defending openings

Protecting and bracing the openings

Openings are the other front in the cyclone battle, and they matter for two linked reasons. First, as Lesson 4.2 showed, a breached windward opening pressurises the interior and magnifies uplift on the roof and the outward load on the walls - so protecting openings is directly protecting the roof we just fought to tie down. Second, openings are intrinsically the weakest parts of the skin: a large pane of glass or a light door resists far less than the wall around it, and it is exactly what the storm and its debris attack first. Defending the openings keeps the envelope sealed and the pressure vessel intact.

There are a few complementary strategies. Shutters - storm shutters, rolling shutters, or even robust temporary boarding - are the classic protection: a strong, well-fixed cover over glazing that takes the wind pressure and the debris impact so the glass behind survives. In cyclone regions, permanent or quickly deployable shutters on the vulnerable openings are among the most cost-effective resilience measures there is. Impact-resistant glazing - laminated assemblies designed to resist penetration and to hold together even when cracked - is the alternative or complement where shutters are impractical, keeping the envelope sealed even after an impact. Strong, well-anchored doors - especially large doors like garage or workshop shutters, which are notorious first-failure points - must be rated and fixed for the pressures, because a failed large door is a guaranteed windward breach. And the frames and their fixings matter as much as the panel: a good shutter on a frame that tears out of the wall has failed.

The design discipline is to identify the openings that matter and defend them deliberately, not to treat glazing as purely a daylight-and-view decision in cyclone country. Large glazed areas facing the likely storm direction are liabilities unless protected; the most exposed openings should be the best defended; and a household should be able to close the building down before a storm. This interlocks with the safe-room idea in the next lesson: the most protected opening-free or shutter-protected space becomes the refuge. As always, the design pressures, the impact-resistance requirements and the rating of shutters, glazing and doors come from IS 875 Part 3, product standards and the engineer - the architect's job is to plan for protectable openings, place the vulnerable glass away from the worst exposure, and make sure every opening can be defended.

debrisunprotected = breachshutter = sealed
Zoom
Defending the openings: an unprotected window is smashed by wind-borne debris and becomes a breach, while a shutter or impact-resistant assembly takes the missile and the pressure so the envelope stays sealed.

Wind-borne debris: the storm's missiles

The last piece is what the wind carries. A cyclone does not attack with wind alone; it picks up and hurls debris - sheets of roofing torn from other buildings, branches and whole trees, signboards, loose site materials, unsecured objects from balconies and yards - and flings them at lethal speed. This wind-borne debris is a major cause of envelope breaches: a flying roof sheet or timber that smashes a window starts exactly the internal-pressurisation failure we have been fighting, and debris injures and kills people directly. So debris is both a structural threat (it breaches the envelope) and a life-safety threat.

Designing against debris works on two levels. At the building level, the openings most likely to be hit - those facing the storm and at lower levels where debris flies densest - should be protected with shutters or impact-resistant glazing so that a strike does not become a breach. This is the same measure as opening protection above, now justified by the missile rather than the pressure: impact-resistant assemblies are specifically tested against representative 'missiles'. Solid, well-anchored walls resist debris far better than glazing, which is another reason to keep large vulnerable glass away from the most exposed faces. At the site and detailing level, resilience means not creating the missiles: securing or removing loose objects, designing roofs and cladding so they do not themselves become the debris that destroys the neighbour, anchoring rooftop equipment, and choosing robust, well-fixed external elements rather than light ones that detach. A community where every building's roof stays on is a community with far less flying debris.

There is an order-of-magnitude point worth keeping. The worst debris tends to be other people's failed buildings - which is why building-by-building resilience is also collective resilience, and why codes and the safe-room strategy of the next lesson matter so much. For the individual designer, the takeaway is concrete: in cyclone country, assume the storm will throw things; protect the openings that a missile would turn into a breach; keep vulnerable glazing away from the worst exposure; and detail your own building so it does not shed the debris that harms others. The specific missile criteria, impact ratings and test standards are the engineer's and the product standards' to apply under IS 875 Part 3 and the governing code - the architect's job is to take debris seriously as a design load, not an afterthought.

debrisunprotected = breachshutter = sealed
Zoom
Defending the openings: an unprotected window is smashed by wind-borne debris and becomes a breach, while a shutter or impact-resistant assembly takes the missile and the pressure so the envelope stays sealed.

The storm throws missiles - mostly other buildings' roofs. Protect openings; don't become the debris.

Verify-this: the chain is the principle; the capacities and ratings are the engineer's

Roof uplift & wind loads (IS 875 Part 3)

Uplift pressures on roofs, peak suctions at edges/corners, load combinations

The code gives the uplift pressures, including the severe local values at eaves, ridges and corners. The engineer applies them to size the hold-down chain - never estimate roof uplift by eye.

Connections & anchorage (structural engineer)

Roof-to-wall straps/hold-downs, wall-to-foundation anchorage, connection capacities

The continuous load path is only as strong as its weakest link. Strap types, capacities and anchorage details are engineered to the code for the specific roof, structure and loads.

Opening protection & impact (product standards + code)

Shutter and glazing impact ratings, wind-borne debris 'missile' criteria, door ratings

Impact-resistant glazing and shutters are tested against representative missiles. Ratings and criteria come from product standards and the engineer under IS 875 Part 3 and the governing code.

Wind vs seismic trade-off (IS 875 Part 3 + IS 1893)

Light vs heavy roof, mass and uplift balanced against seismic demand

Light roofs reduce seismic mass but must be tied hard against uplift; heavy roofs resist uplift but raise seismic forces. The engineer balances both to the relevant codes for your zone.

Hands-on workshop

Workshop - trace the uplift chain and defend the openings

You will take a simple pitched-roof building and trace its uplift load path link by link from the roof covering to the ground, find the weakest link, then plan the opening protection that keeps the envelope sealed against pressure and debris. Reasoning and sketching only; no connection calculation.

A building section, roof plan and elevations, coloured pens for the uplift chain, and this lesson. No connection calculation - this is about tracing continuity and planning protection.

Given & goal
Goal: audit a roof's hold-down chain and plan opening protection
Inputs: a section and roof plan of a simple building (yours, a studio project, or a published house in cyclone country) + this lesson
Time: ~60 minutes
  1. 1On the section, draw the uplift chain as a coloured line from the roof covering down: covering -> rafters/trusses -> roof-to-wall connection -> walls -> wall-to-foundation anchorage -> foundation -> ground. At each junction draw a small box and label the connection that must exist there.
  2. 2Go link by link and rate each: is there a positive, engineered connection, or is the element merely resting, weighted or assumed? Circle the weakest link - the first place the chain would break under uplift. (Common answers: roof covering fixings, roof-to-wall tie, gable ends, large overhangs.)
  3. 3Mark the worst local-suction zones on the roof plan - eaves, ridges, corners - and note where fixings should be densest. Flag any large unbraced overhang, verandah roof or tacked-on addition that breaks the chain.
  4. 4On the elevations, identify the openings facing the likely storm direction and the largest/weakest ones (big glazing, large doors). For each, plan a protection: shutter, impact-resistant glazing, or relocation of vulnerable glass to a sheltered face - and check the frame fixes into real structure.
  5. 5List the site and detailing moves that stop your building creating or being hit by debris (securing loose objects, anchoring rooftop equipment, robust external elements), then separate all your proposals into architect/detail-stage decisions and the capacities, ratings and criteria you would take to IS 875 Part 3 and the engineer.

You’ll walk away with
An annotated section showing the full uplift chain with the weakest link circled, a roof plan marking the peak-suction zones and chain-breaking features, and an elevation showing each vulnerable opening with its planned protection - plus a note separating design-stage decisions from the capacities, ratings and criteria that defer to IS 875 Part 3 and the engineer.

The worked example

Three altitudes on the same idea

Read the band that fits you — or all three.

For the architectResilient design decisions & coordinating the engineer

Design the continuous uplift chain and defend the openings - these are the decisions that keep a roof on in a cyclone. Plan the building so an unbroken hold-down path can run from roof covering to rafters to walls to foundation, with positive connections at every junction; avoid configurations that break it (large unbraced overhangs, awkward gable ends, tacked-on verandah roofs, additions that cut the path). Identify the openings that matter, keep large vulnerable glazing away from the worst storm exposure, and plan for shutters or impact-resistant glazing so the envelope stays sealed under pressure and debris. Defer every connection capacity, strap detail, glazing rating and impact criterion to IS 875 Part 3, the product standards and your structural engineer.

For the interior designerNon-structural safety, fixings & fit-out resilience

Opening protection, shutters and the inner face of the storm skin are squarely in your domain, and in a cyclone they are life-safety elements, not finishes. Specify and detail shutters or impact-resistant glazing for exposed openings, make sure large doors and glazed elements facing the storm can be closed down and are anchored into real structure, and never let a purely aesthetic choice (frameless glass, a big picture window on the weather side) create an undefendable breach point. Coordinate any opening, fixing or penetration with the structural and facade engineers, and help the household plan how to secure the building before a storm - including clearing the loose objects that become missiles.

For the studentThe science and principles of designing for hazards

Remember two things and you will understand most cyclone failures: roofs go first, and the defence is an unbroken chain. Roof uplift is the number-one cyclone failure because suction peaks over the roof, it is held down mainly by its connections, and a breach adds internal pressure - and once the roof is gone the walls lose their brace. The defence is a continuous hold-down path from roof covering to foundation, only as strong as its weakest link, plus protected openings and a skin that survives flying debris. You are not sizing straps or rating glazing - that is IS 875 Part 3, the standards and the engineer - but you must be able to trace the uplift chain and spot where a storm would break it.

Misconception check

A heavy roof is the safest choice in a cyclone because its weight holds it down, so there is no real need to tie it to the structure.

Weight helps resist uplift, but relying on it alone is how roofs are lost - and a heavy roof carries a serious seismic penalty this course keeps flagging. Cyclone uplift, especially when internal pressurisation adds to external suction, can exceed a roof's dead weight, particularly at the eaves, ridges and corners where suction peaks; and in an earthquake a heavy roof is a large mass perched high on the building, which increases seismic forces and is exactly what brittle construction cannot handle. The dependable answer is not simply a heavier roof but a positively, continuously tied-down one: a complete hold-down chain from the roof covering through the rafters or trusses to the walls and down to the foundation, with engineered connections at every link. A well-tied light roof can be both wind-safe and seismically kind; a heavy roof that is merely laid on and weighted is neither. The roof weight, the connection capacities and the balance between wind and seismic demands are engineered decisions under IS 875 Part 3 and IS 1893 for your building - but the principle is continuity and positive anchorage, not weight alone.
Try it

Do it yourself

No tools needed - reason it through from the uplift chain.

  1. 1Explain why roof uplift is the most common cyclone failure, and why losing the roof so often brings down the walls.
  2. 2Trace the continuous hold-down chain from roof covering to ground, naming the connection that must exist at each link.
  3. 3Why is 'the chain is only as strong as its weakest link' the central truth of wind resilience - and what does it mean for how you detail?
  4. 4Give two ways to protect an opening against cyclone pressure and debris, and explain why protecting openings also protects the roof.
  5. 5What is wind-borne debris, where does most of it come from, and what are two ways a designer reduces the debris threat?
Take this with you

The one line to carry out

Roof uplift is the number-one cyclone failure, so resilience is an unbroken hold-down chain from roof covering to foundation - only as strong as its weakest link - together with protected openings and an impact-resistant skin that denies the storm its breach, with every connection capacity and rating deferred to IS 875 Part 3 and the engineer.
Take it further
References & further reading

Peer-reviewed journals & authoritative standards

  1. 01Design of buildings to resist cyclone and hurricane damageWikipedia - Hurricane-proof building, 2026.
  2. 02Wind uplift and loads on roofsWikipedia - Wind load, 2026.
  3. 03Tropical cyclones and wind-borne debrisWikipedia - Tropical cyclone, 2026.
  4. 04Wind engineering of buildings and roofsWikipedia - Wind engineering, 2026.
Related lessons
Recap
In cyclones the roof usually goes first, because suction peaks over the roof and at its edges, the roof is held down mainly by its connections, and a breach adds internal pressure - and once the roof is gone the walls lose the brace that held their tops together and follow. The defence is a continuous uplift load path - roof covering to rafters/trusses to walls to foundation to ground - with positive connections at every link, only as strong as its weakest link, so continuity, not a single heavy component, is what matters. Openings must be defended with shutters, impact-resistant glazing and strong anchored doors, because a breached opening pressurises the building and magnifies the very uplift being fought, and because the storm throws debris - mostly other buildings' failed roofs - that turns unprotected glazing into a breach. Every connection capacity, glazing rating, missile criterion and the light-versus-heavy roof trade-off defers to IS 875 Part 3, the product standards, IS 1893 and the structural engineer.
Carry forward →

Even the best-tied building can be overwhelmed by an extreme cyclone and its storm surge, and not everyone lives in an engineered house - so resilient communities also need places of last resort. Next we design cyclone shelters and household safe rooms.

A

The author

Amogh N P

Architect, interior designer, and creative polymath. Studio Matrx began in his notebooks — his vision of design made honest, useful, and open to everyone. Its Academy is written and taught in his memory, and free, forever.

More about Amogh →