Fast and secure standalone server for resizing and converting remote images
Clone or download
Latest commit d4ca9af Oct 8, 2018
Permalink
Failed to load latest commit information.
docs Update docs Oct 8, 2018
examples Update PHP URL generation example (#66) Sep 6, 2018
vendor fasthttp; Optimized memory allocation Oct 5, 2018
.dockerignore Add docs to .dockerignore Oct 5, 2018
.gitignore Enable s3 transport scheme Oct 4, 2018
.travis.yml Drop Go 1.8 support Oct 5, 2018
CHANGELOG.md Fix changelog Oct 8, 2018
Dockerfile cgo compilation workaround for go 1.9.4 (#52) Feb 22, 2018
Gopkg.lock fasthttp; Optimized memory allocation Oct 5, 2018
Gopkg.toml fasthttp; Optimized memory allocation Oct 5, 2018
LICENSE Initial commit Jun 20, 2017
README.md fasthttp; Optimized memory allocation Oct 5, 2018
app.json Make kay and salt optional in app.json Oct 3, 2018
cmyk_profile.go Fix processing of CMYK without embedded profile Jan 10, 2018
config.go Merge branch 'crohr/s3-protocol' into version/2.0 Oct 4, 2018
crypt.go Typo Oct 5, 2018
download.go Predefine static errors Oct 5, 2018
errors.go Predefine static errors Oct 5, 2018
etag.go Predefine static errors Oct 5, 2018
gzip.go fasthttp; Optimized memory allocation Oct 5, 2018
heroku.yml Deploy to Heroku with Docker (#50) Feb 2, 2018
image_types.h Rename processing options constants and move them to processing_optio… Oct 2, 2018
logo.svg Logo Sep 21, 2017
main.go Disable profiling Oct 5, 2018
mutex.go fasthttp; Optimized memory allocation Oct 5, 2018
presets.go Check presets options on start; Exit on preset error Oct 2, 2018
process.go Typo Oct 5, 2018
processing_options.go Fix path parsing Oct 8, 2018
s3transport.go Merge branch 'crohr/s3-protocol' into version/2.0 Oct 4, 2018
server.go Fix path parsing Oct 8, 2018
timer.go fasthttp; Optimized memory allocation Oct 5, 2018
utils.go Focus point gravity Oct 2, 2018
vips.h Background option Oct 2, 2018

README.md

imgproxy

Build Status Docker MicroBadger Size Docker Pulls

imgproxy is a fast and secure standalone server for resizing and converting remote images. The main principles of imgproxy are simplicity, speed, and security.

imgproxy can be used to provide a fast and secure way to replace all the image resizing code of your web application (like calling ImageMagick or GraphicsMagick, or using libraries), while also being able to resize everything on the fly, fast and easy. imgproxy is also indispensable when handling lots of image resizing, especially when images come from a remote source.

imgproxy does one thing — resizing remote images — and does it well. It works great when you need to resize multiple images on the fly to make them match your application design without preparing a ton of cached resized images or re-doing it every time the design changes.

imgproxy is a Go application, ready to be installed and used in any Unix environment — also ready to be containerized using Docker.

See this article for a good intro and all the juicy details! imgproxy: Resize your images instantly and securely

Sponsored by Evil Martians

Simplicity

"No code is better than no code."

imgproxy only includes the must-have features for image processing, fine-tuning and security. Specifically,

  • It would be great to be able to rotate, flip and apply masks to images, but in most of the cases, it is possible — and is much easier — to do that using CSS3.
  • It may be great to have built-in HTTP caching of some kind, but it is way better to use a Content-Delivery Network or a caching proxy server for this, as you will have to do this sooner or later in the production environment.
  • It might be useful to have everything built in — such as HTTPS support — but an easy way to solve that would be just to use a proxying HTTP server such as nginx.

Speed

imgproxy uses probably the most efficient image processing library there is, called libvips. It is screaming fast and has a very low memory footprint; with it, we can handle the processing for a massive amount of images on the fly.

imgproxy also uses fasthttp for the best HTTP networking speed and less memory usage.

Security

Massive processing of remote images is a potentially dangerous thing, security-wise. There are many attack vectors, so it is a good idea to consider attack prevention measures first. Here is how imgproxy can help:

  • imgproxy checks image type and "real" dimensions when downloading, so the image will not be fully downloaded if it has an unknown format or the dimensions are too big (there is a setting for that). That is how imgproxy protects you from so called "image bombs" like those described at https://www.bamsoftware.com/hacks/deflate.html.

  • imgproxy protects image URLs with a signature, so an attacker cannot cause a denial-of-service attack by requesting multiple image resizes.

  • imgproxy supports authorization by an HTTP header. That prevents using imgproxy directly by an attacker but allows to use it through a CDN or a caching server — just by adding a header to a proxy or CDN config.

Documentation

  1. Getting started
  2. Installation
  3. Configuration
  4. Generating the URL
  5. Presets
  6. Serving local files
  7. Serving files from Amazon S3
  8. Source image formats support
  9. About processing pipeline
  10. Health check

Author

Sergey "DarthSim" Alexandrovich

Many thanks to Roman Shamin for the awesome logo.

Great bunch of kudos goes to John Cupitt who develops libvips and helps me to optimize its usage under the hood of imgproxy.

License

imgproxy is licensed under the MIT license.

See LICENSE for the full license text.