超好用的图片处理工具，可配合minio实现如阿里云的图片处理查询

DarthSim 0dc16ba76b Fix path before signature check		vor 2 Jahren
.github	bdae79ccc1 Remove assignees from dependabot.yml	vor 3 Jahren
.lefthook	c58f043a83 Versioned docs	vor 3 Jahren
bufpool	ad5bd69f80 Delayed download buffer grow	vor 3 Jahren
bufreader	7709b74a5e Bump version	vor 3 Jahren
config	ff3d3cedc4 Rename configurators.Hex to configurators.HexSlice and configurators.HexFile to configurators.HexSliceFile	vor 3 Jahren
cookies	d8bedfd930 Polish cookies passthrough	vor 3 Jahren
docker	0f7281e56e `raw` processing option	vor 2 Jahren
docs	c3d3aac559 Add default value to IMGPROXY_MAX_REDIRECTS documentation and clarify usage of value 0 (#969)	vor 2 Jahren
errorreport	7709b74a5e Bump version	vor 3 Jahren
etag	d610afb48b Use require instead of assert in tests	vor 3 Jahren
examples	aed4ab8753 Cleanup examples	vor 3 Jahren
gliblog	d5a3a94a14 GLib logger is too verbose	vor 3 Jahren
heroku	6ce4201bb0 Add build arg to Heroku Dockerfile	vor 6 Jahren
httprange	58fd025f89 Add ranged requests suport to transports	vor 2 Jahren
ierrors	b98919ead4 Better downloading error reporting cause	vor 3 Jahren
imagedata	0f7281e56e `raw` processing option	vor 2 Jahren
imagemeta	05be115f38 Detect SVG using lexer instead of encoding/xml	vor 3 Jahren
imagetype	0f7281e56e `raw` processing option	vor 2 Jahren
imath	7a968d5fed Crop between scale-on-load and scale	vor 3 Jahren
k6	835ddbc5ef Update k6 script	vor 2 Jahren
logger	a8293461e6 Write logs to STDOUT instead of STDERR	vor 3 Jahren
memory	82c6718edb Combine new & old build contraints format	vor 3 Jahren
metrics	0f7281e56e `raw` processing option	vor 2 Jahren
options	0f7281e56e `raw` processing option	vor 2 Jahren
processing	cd5c30fa0d Make filters low-level	vor 3 Jahren
reuseport	82c6718edb Combine new & old build contraints format	vor 3 Jahren
router	20039f49a5 Better error metrics	vor 3 Jahren
security	d610afb48b Use require instead of assert in tests	vor 3 Jahren
semaphore	526724105e Proper semaphore	vor 3 Jahren
structdiff	70840467d0 format_quality processing option	vor 3 Jahren
svg	e1e2277a32 Sanitize SVG	vor 3 Jahren
testdata	76897dbf1b Support arithmetic encoded jpeg files (#909)	vor 3 Jahren
transport	913cfb22ca Add ranged requests suport to transports	vor 2 Jahren
version	38c55feab9 Bump version	vor 3 Jahren
vips	cd5c30fa0d Make filters low-level	vor 3 Jahren
.dockerignore	7e3b838c45 Use native Go in Docker build	vor 3 Jahren
.gitignore	835ddbc5ef Update k6 script	vor 2 Jahren
.golangci.yml	2ea1466d96 Global refactoring	vor 4 Jahren
BENCHMARK.md	cee746a1ee Update BENCHMARK.md (#505)	vor 4 Jahren
CHANGELOG.md	0dc16ba76b Fix path before signature check	vor 2 Jahren
LICENSE	0c006ce61e Initial commit	vor 8 Jahren
NOTICE	e781ea2019 Add CGIF to NOTICE	vor 3 Jahren
README.md	629d2558bd Update badges in README	vor 3 Jahren
app.json	1934025bc7 Fix logo in app.json	vor 6 Jahren
build-docs-sitemap.sh	b75b6cb5a2 Add robots.txt and sitemap.txt	vor 3 Jahren
cgo_symbolizer.go	82c6718edb Combine new & old build contraints format	vor 3 Jahren
cloudbuild.yaml	3997a0fea0 Configure cloudbuild logging	vor 3 Jahren
fix_path.go	30f744e116 Try to fix path if signature is invalid	vor 2 Jahren
go.mod	922c730d55 Tidy mods	vor 3 Jahren
go.sum	501dc05a44 Update deps	vor 3 Jahren
healthcheck.go	1d3706d56c Fix health command when path prefix is set	vor 3 Jahren
heroku.yml	6ce4201bb0 Add build arg to Heroku Dockerfile	vor 6 Jahren
landing.go	8f062a43ee Fix typo in response header name (#693)	vor 4 Jahren
lefthook.yml	c58f043a83 Versioned docs	vor 3 Jahren
logo.svg	f0bd65aabf Optimize logo	vor 6 Jahren
main.go	a9dda9ca4e Set GLib log handler	vor 3 Jahren
netlify.toml	b75b6cb5a2 Add robots.txt and sitemap.txt	vor 3 Jahren
pprof.go	82c6718edb Combine new & old build contraints format	vor 3 Jahren
processing_handler.go	0dc16ba76b Fix path before signature check	vor 2 Jahren
processing_handler_test.go	d610afb48b Use require instead of assert in tests	vor 3 Jahren
server.go	0f7281e56e `raw` processing option	vor 2 Jahren
stream.go	12f17a56bc Log response even if raw streaming failed	vor 2 Jahren

imgproxy

<img align="right" width="200" height="200" title="imgproxy logo"

 src="https://cdn.rawgit.com/DarthSim/imgproxy/master/logo.svg">

imgproxy is a fast and secure standalone server for resizing and converting remote images. The guiding principles behind imgproxy are security, speed, and simplicity.

imgproxy is able to quickly and easily resize images on the fly, and it's well-equipped to handle a large amount of image resizing. imgproxy is a fast, secure replacement for all the image resizing code inside your web application (such as resizing libraries, or code that calls ImageMagick or GraphicsMagic). It's also an indispensable tool for processing images from a remote source. With imgproxy, you don’t need to repeatedly prepare images to fit your design every time it changes.

To get an even better introduction, and to dive deeper into the nitty gritty details, check out this article: imgproxy: Resize your images instantly and securely

Simplicity

"No code is better than no code."

imgproxy only includes the must-have features for image processing, fine-tuning and security. Specifically,

It would be great to be able to rotate, flip and apply masks to images, but in most of the cases, it is possible — and is much easier — to do that using CSS3.
It may be great to have built-in HTTP caching of some kind, but it is way better to use a Content-Delivery Network or a caching proxy server for this, as you will have to do this sooner or later in the production environment.
It might be useful to have everything built in — such as HTTPS support — but an easy way to solve that would be just to use a proxying HTTP server such as nginx.

Speed

imgproxy takes advantage of probably the most efficient image processing library out there – libvips. It’s scary fast and comes with a very low memory footprint. Thanks to libvips, we can readily and extemporaneously process a massive amount of images.

imgproxy uses Go’s raw (no wrappers) native net/http package to omit any overhead while processing requests and provides the best possible HTTP support.

You can take a look at some benchmarking results and compare imgproxy with some well-known alternatives in our benchmark report.

Security

In terms of security, the massive processing of remote images is a potentially dangerous endeavor. There are a number of possible attack vectors, so it’s a good idea to take an approach that considers attack prevention measures as a priority. Here’s how imgproxy does this:

imgproxy checks the image type and its “real” dimensions when downloading. The image will not be fully downloaded if it has an unknown format or if the dimensions are too big (you can set the max allowed dimensions). This is how imgproxy protects from so called "image bombs”, like those described in this doc.
imgproxy protects image URLs with a signature, so an attacker cannot enact a denial-of-service attack by requesting multiple image resizes.
imgproxy supports authorization by HTTP header. This prevents imgproxy from being used directly by an attacker, but allows it to be used via a CDN or a caching server — simply by adding a header to a proxy or CDN config.

Usage

Check out our 📑 Documentation.

Author

Sergey "DarthSim" Alexandrovich

Special thanks

Many thanks to:

Roman Shamin for the awesome logo.
Alena Kirdina and Alexander Madyankin for the great website.
John Cupitt for developing libvips and for helping me optimize its usage with imgproxy.
Kirill Kuznetsov for the Helm chart.
Travis Turner for keeping the documentation in good shape.

License

imgproxy is licensed under the MIT license.

See LICENSE for the full license text.

Security Contact

To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.

README.md