超好用的图片处理工具,可配合minio实现如阿里云的图片处理查询

DarthSim 271b15381f Update testdata/test1.svg 1 tahun lalu
.github 6cff6d4a64 Exclude Go 1.18 from CI 2 tahun lalu
.lefthook 762c0add24 Dynamically fetch versions in docs 2 tahun lalu
assets ef774dcaa0 Update sponsored badge 2 tahun lalu
bufpool 8227592451 Optimize bufpool 1 tahun lalu
bufreader 7709b74a5e Bump version 3 tahun lalu
config 9175c66fee Update maximum and default AVIF speed 1 tahun lalu
cookies d8bedfd930 Polish cookies passthrough 3 tahun lalu
docker d094b57a6f Update base Docker image 1 tahun lalu
docs 2459741218 Unsharpening => unsharp masking in docs 1 tahun lalu
errorreport 7709b74a5e Bump version 3 tahun lalu
etag e719c9d39b Get rid of io/ioutil usage 2 tahun lalu
examples 524434b63f Drop dependency + use built-in `base64url` (#1156) 1 tahun lalu
gliblog d5a3a94a14 GLib logger is too verbose 2 tahun lalu
heroku 6ce4201bb0 Add build arg to Heroku Dockerfile 5 tahun lalu
httprange 58fd025f89 Add ranged requests suport to transports 2 tahun lalu
ierrors b98919ead4 Better downloading error reporting cause 3 tahun lalu
imagedata 8227592451 Optimize bufpool 1 tahun lalu
imagemeta b20b5ff768 Fix Photoshop metadata dump 1 tahun lalu
imagetype 2044071d04 Better Content-Disposition formatting for imagetype 2 tahun lalu
imath 7d1f7c903a Use RoundToEven when calculating offsets and watermark size 2 tahun lalu
k6 640cb2c461 Add http_res_body_size to k6 script 2 tahun lalu
logger cfa4b596d1 feat(logger): implement structured log formatter gcp compliant (#1028) 2 tahun lalu
memory 82c6718edb Combine new & old build contraints format 3 tahun lalu
metrics f288254505 Update deps 2 tahun lalu
options a246eda065 Ensure URL replacements are executed in the specified order 1 tahun lalu
processing 136a5d093f Fix saving to JPEG when using linear colorspace 1 tahun lalu
reuseport 82c6718edb Combine new & old build contraints format 3 tahun lalu
router 20039f49a5 Better error metrics 2 tahun lalu
security 1a9768a2c6 Prohibit connecting to loopback, link-local multicast, and link-local unicast IP addresses by default 2 tahun lalu
semaphore 526724105e Proper semaphore 2 tahun lalu
structdiff 70840467d0 format_quality processing option 3 tahun lalu
svg 523f3a6546 Clone headers in the svg package 1 tahun lalu
testdata 271b15381f Update testdata/test1.svg 1 tahun lalu
transport e8952edbf7 allow acquiring s3 access credentials through role assumption (#1152) 2 tahun lalu
version 1dacb3beb1 Bump version 1 tahun lalu
vips 136a5d093f Fix saving to JPEG when using linear colorspace 1 tahun lalu
.dockerignore 7e3b838c45 Use native Go in Docker build 3 tahun lalu
.gitignore 835ddbc5ef Update k6 script 2 tahun lalu
.golangci.yml 2ea1466d96 Global refactoring 4 tahun lalu
BENCHMARK.md cee746a1ee Update BENCHMARK.md (#505) 4 tahun lalu
CHANGELOG.md 94c9598037 Update changelog 1 tahun lalu
LICENSE 0c006ce61e Initial commit 7 tahun lalu
NOTICE ce24671ca0 Update NOTICE 1 tahun lalu
README.md ef774dcaa0 Update sponsored badge 2 tahun lalu
SECURITY.md 947d65cf29 Create SECURITY.md (#1080) 2 tahun lalu
app.json 1934025bc7 Fix logo in app.json 5 tahun lalu
build-docs-sitemap.sh b75b6cb5a2 Add robots.txt and sitemap.txt 3 tahun lalu
cgo_symbolizer.go 82c6718edb Combine new & old build contraints format 3 tahun lalu
cloudbuild.yaml 3997a0fea0 Configure cloudbuild logging 3 tahun lalu
fix_path.go 30f744e116 Try to fix path if signature is invalid 2 tahun lalu
go.mod f288254505 Update deps 2 tahun lalu
go.sum f288254505 Update deps 2 tahun lalu
healthcheck.go aaaf1c706d Normalize IMGPROXY_PATH_PREFIX and IMGPROXY_HEALTH_CHECK_PATH 1 tahun lalu
heroku.yml 6ce4201bb0 Add build arg to Heroku Dockerfile 5 tahun lalu
landing.go 41b9cfbc6e Better landing 2 tahun lalu
lefthook.yml 4e4b9edb53 Exclude twitter.com from check-links git hook 1 tahun lalu
logo.svg f0bd65aabf Optimize logo 5 tahun lalu
main.go a9dda9ca4e Set GLib log handler 2 tahun lalu
netlify.toml b75b6cb5a2 Add robots.txt and sitemap.txt 3 tahun lalu
pprof.go 82c6718edb Combine new & old build contraints format 3 tahun lalu
processing_handler.go 4de9b83899 fix(svg/sanitize): preserve headers from origin data 1 tahun lalu
processing_handler_test.go 93063787b1 Add svg package tests 1 tahun lalu
server.go 67cd992e12 Set cache-control: no-cache to heath response 2 tahun lalu
stream.go 4944dfab30 Support Last-Modified response header and support If-Modified-Since request header. (#1147) 2 tahun lalu

README.md

imgproxy logo

Website | Blog | Documentation | imgproxy Pro | Docker | Twitter | Discord

GH Test GH Lint Docker Pulls


imgproxy is a fast and secure standalone server for resizing and converting remote images. The guiding principles behind imgproxy are security, speed, and simplicity.

imgproxy is able to quickly and easily resize images on the fly, and it's well-equipped to handle a large amount of image resizing. imgproxy is a fast, secure replacement for all the image resizing code inside your web application (such as resizing libraries, or code that calls ImageMagick or GraphicsMagic). It's also an indispensable tool for processing images from a remote source. With imgproxy, you don’t need to repeatedly prepare images to fit your design every time it changes.

To get an even better introduction, and to dive deeper into the nitty gritty details, check out this article: imgproxy: Resize your images instantly and securely

<source
  media="(prefers-color-scheme: dark)"
  srcset="https://evilmartians.com/badges/sponsored-by-evil-martians_v2.0_for-dark-bg@2x.png"
>
<img
  src="https://evilmartians.com/badges/sponsored-by-evil-martians_v2.0@2x.png"
  alt="Sponsored by Evil Martians"
  width="236"
  height="54"
>

Simplicity

"No code is better than no code."

imgproxy only includes the must-have features for image processing, fine-tuning and security. Specifically,

  • It would be great to be able to rotate, flip and apply masks to images, but in most of the cases, it is possible — and is much easier — to do that using CSS3.
  • It may be great to have built-in HTTP caching of some kind, but it is way better to use a Content-Delivery Network or a caching proxy server for this, as you will have to do this sooner or later in the production environment.
  • It might be useful to have everything built in — such as HTTPS support — but an easy way to solve that would be just to use a proxying HTTP server such as nginx.

Speed

imgproxy takes advantage of probably the most efficient image processing library out there – libvips. It’s scary fast and comes with a very low memory footprint. Thanks to libvips, we can readily and extemporaneously process a massive amount of images.

imgproxy uses Go’s raw (no wrappers) native net/http package to omit any overhead while processing requests and provides the best possible HTTP support.

You can take a look at some benchmarking results and compare imgproxy with some well-known alternatives in our benchmark report.

Security

In terms of security, the massive processing of remote images is a potentially dangerous endeavor. There are a number of possible attack vectors, so it’s a good idea to take an approach that considers attack prevention measures as a priority. Here’s how imgproxy does this:

  • imgproxy checks the image type and its “real” dimensions when downloading. The image will not be fully downloaded if it has an unknown format or if the dimensions are too big (you can set the max allowed dimensions). This is how imgproxy protects from so called "image bombs”, like those described in this doc.

  • imgproxy protects image URLs with a signature, so an attacker cannot enact a denial-of-service attack by requesting multiple image resizes.

  • imgproxy supports authorization by HTTP header. This prevents imgproxy from being used directly by an attacker, but allows it to be used via a CDN or a caching server — simply by adding a header to a proxy or CDN config.

Usage

Check out our 📑 Documentation.

Author

Sergey "DarthSim" Alexandrovich

Special thanks

Many thanks to:

License

imgproxy is licensed under the MIT license.

See LICENSE for the full license text.

Security Contact

To report a security vulnerability, please contact us at security@imgproxy.net. We will coordinate the fix and disclosure.