Description
imgproxy is a fast and secure standalone server for resizing and converting remote images. The guiding principles behind imgproxy are security, speed, and simplicity.
imgproxy is able to quickly and easily resize images on the fly, and it's well-equipped to handle a large amount of image resizing. imgproxy is a fast, secure replacement for all the image resizing code inside your web application (such as resizing libraries, or code that calls ImageMagick or GraphicsMagic). It's also an indispensable tool for processing images from a remote source. With imgproxy, you don’t need to repeatedly prepare images to fit your design every time it changes.
To get an even better introduction, and to dive deeper into the nitty gritty details, check out this article: https://evilmartians.com/chronicles/introducing-imgproxy
imgproxy alternatives and similar packages
Based on the "Images" category.
Alternatively, view imgproxy alternatives based on common mentions on social networks and blogs.
-
Primitive Pictures
Reproducing images with geometric primitives. -
imaginary
Fast, simple, scalable, Docker-ready HTTP microservice for high-level image processing -
pigo
Fast face detection, pupil/eyes localization and facial landmark points detection library in pure Go. -
gowitness
🔍 gowitness - a golang, web screenshot utility using Chrome Headless -
bimg
Go package for fast high-level image processing powered by libvips C library -
go-opencv
Go bindings for OpenCV / 2.x API in gocv / 1.x API in opencv -
canvas
Cairo in Go: vector to raster, SVG, PDF, EPS, WASM, OpenGL, Gio, etc. -
geopattern
:triangular_ruler: Create beautiful generative image patterns from a string in golang. -
stegify
🔍 Go tool for LSB steganography, capable of hiding any file within an image. -
Angular 2 Image Gallery
Image Gallery built with Angular 17+, node.js and GraphicsMagick -
steganography
Pure Golang Library that allows LSB steganography on images using ZERO dependencies -
darkroom
An image proxy with changeable storage backends and image processing engines with focus on speed and resiliency. -
mergi
go library for image programming (merge, crop, resize, watermark, animate, ease, transit) -
fastimage
Finds the type and/or size of a remote image given its uri, by fetching as little as needed. -
LookUp
:mag: Pure Go implementation of fast image search and simple OCR, focused on reading info from screenshots -
webp-server
Simple and minimal image server capable of storing, resizing, converting and caching images. -
color-extractor
Simple image color extractor written in Go with no external dependencies -
goimghdr
The imghdr module determines the type of image contained in a file for go -
scout
Scout is a standalone open source software solution for DIY video security.
WorkOS - The modern identity platform for B2B SaaS
Do you think we are missing an alternative of imgproxy or a related project?
Popular Comparisons
README
imgproxy
imgproxy is a fast and secure standalone server for resizing and converting remote images. The guiding principles behind imgproxy are security, speed, and simplicity.
imgproxy is able to quickly and easily resize images on the fly, and it's well-equipped to handle a large amount of image resizing. imgproxy is a fast, secure replacement for all the image resizing code inside your web application (such as resizing libraries, or code that calls ImageMagick or GraphicsMagic). It's also an indispensable tool for processing images from a remote source. With imgproxy, you don’t need to repeatedly prepare images to fit your design every time it changes.
To get an even better introduction, and to dive deeper into the nitty gritty details, check out this article: imgproxy: Resize your images instantly and securely
Simplicity
"No code is better than no code."
imgproxy only includes the must-have features for image processing, fine-tuning and security. Specifically,
- It would be great to be able to rotate, flip and apply masks to images, but in most of the cases, it is possible — and is much easier — to do that using CSS3.
- It may be great to have built-in HTTP caching of some kind, but it is way better to use a Content-Delivery Network or a caching proxy server for this, as you will have to do this sooner or later in the production environment.
- It might be useful to have everything built in — such as HTTPS support — but an easy way to solve that would be just to use a proxying HTTP server such as nginx.
Speed
imgproxy takes advantage of probably the most efficient image processing library out there – libvips
. It’s scary fast and comes with a very low memory footprint. Thanks to libvips, we can readily and extemporaneously process a massive amount of images.
imgproxy uses Go’s raw (no wrappers) native net/http
package to omit any overhead while processing requests and provides the best possible HTTP support.
You can take a look at some benchmarking results and compare imgproxy with some well-known alternatives in our benchmark report.
Security
In terms of security, the massive processing of remote images is a potentially dangerous endeavor. There are a number of possible attack vectors, so it’s a good idea to take an approach that considers attack prevention measures as a priority. Here’s how imgproxy does this:
imgproxy checks the image type and its “real” dimensions when downloading. The image will not be fully downloaded if it has an unknown format or if the dimensions are too big (you can set the max allowed dimensions). This is how imgproxy protects from so called "image bombs”, like those described in this doc.
imgproxy protects image URLs with a signature, so an attacker cannot enact a denial-of-service attack by requesting multiple image resizes.
imgproxy supports authorization by HTTP header. This prevents imgproxy from being used directly by an attacker, but allows it to be used via a CDN or a caching server — simply by adding a header to a proxy or CDN config.
Usage
Check out our 📑 Documentation.
Author
Sergey "DarthSim" Alexandrovich
Special thanks
Many thanks to:
- Roman Shamin for the awesome logo.
- Alena Kirdina and Alexander Madyankin for the great website.
- John Cupitt for developing libvips and for helping me optimize its usage with imgproxy.
- Kirill Kuznetsov for the Helm chart.
- Travis Turner for keeping the documentation in good shape.
License
imgproxy is licensed under the MIT license.
See LICENSE for the full license text.
Security Contact
To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.
*Note that all licence references and agreements mentioned in the imgproxy README section above
are relevant to that project's source code only.