超好用的图片处理工具,可配合minio实现如阿里云的图片处理查询

DarthSim 2c28252966 Fix the way the `dpr` processing option affects offsets and paddings 2 年 前
.github ee9e8f0cb1 Update Go versions in CI 2 年 前
.lefthook c58f043a83 Versioned docs 3 年 前
assets ef774dcaa0 Update sponsored badge 2 年 前
bufpool ad5bd69f80 Delayed download buffer grow 3 年 前
bufreader 7709b74a5e Bump version 3 年 前
config 1a9768a2c6 Prohibit connecting to loopback, link-local multicast, and link-local unicast IP addresses by default 2 年 前
cookies d8bedfd930 Polish cookies passthrough 3 年 前
ctxreader 1403886840 Wrap custom transport bodies with a context reader 2 年 前
docker e85054326a Update Docker base image 2 年 前
docs 2c28252966 Fix the way the `dpr` processing option affects offsets and paddings 2 年 前
errorreport 7709b74a5e Bump version 3 年 前
etag e719c9d39b Get rid of io/ioutil usage 2 年 前
examples aed4ab8753 Cleanup examples 2 年 前
gliblog d5a3a94a14 GLib logger is too verbose 3 年 前
heroku 6ce4201bb0 Add build arg to Heroku Dockerfile 6 年 前
httprange 58fd025f89 Add ranged requests suport to transports 2 年 前
ierrors b98919ead4 Better downloading error reporting cause 3 年 前
imagedata f6f0cbcb4f Fix detection of dead HTTP/2 connections 2 年 前
imagemeta c105e66e39 Don't return error from imagemeta.isSVG 2 年 前
imagetype 2044071d04 Better Content-Disposition formatting for imagetype 2 年 前
imath 2c28252966 Fix the way the `dpr` processing option affects offsets and paddings 2 年 前
k6 f6766e4c1d Update k6 script 2 年 前
logger cfa4b596d1 feat(logger): implement structured log formatter gcp compliant (#1028) 2 年 前
memory 82c6718edb Combine new & old build contraints format 3 年 前
metrics 6f6f27d6a9 Fix OTel metrics 2 年 前
options ee0cb9feda Allow encoding `filename` with Base64 2 年 前
processing 2c28252966 Fix the way the `dpr` processing option affects offsets and paddings 2 年 前
reuseport 82c6718edb Combine new & old build contraints format 3 年 前
router 20039f49a5 Better error metrics 3 年 前
security 1a9768a2c6 Prohibit connecting to loopback, link-local multicast, and link-local unicast IP addresses by default 2 年 前
semaphore 526724105e Proper semaphore 3 年 前
structdiff 70840467d0 format_quality processing option 3 年 前
svg 62f8d08a93 Sanitize `use` tag in SVG 2 年 前
testdata 76897dbf1b Support arithmetic encoded jpeg files (#909) 3 年 前
transport f6f0cbcb4f Fix detection of dead HTTP/2 connections 2 年 前
version a2efeb55be Bump version 2 年 前
vips 2c28252966 Fix the way the `dpr` processing option affects offsets and paddings 2 年 前
.dockerignore 7e3b838c45 Use native Go in Docker build 3 年 前
.gitignore 835ddbc5ef Update k6 script 2 年 前
.golangci.yml 2ea1466d96 Global refactoring 4 年 前
BENCHMARK.md cee746a1ee Update BENCHMARK.md (#505) 4 年 前
CHANGELOG.md 2c28252966 Fix the way the `dpr` processing option affects offsets and paddings 2 年 前
LICENSE 0c006ce61e Initial commit 8 年 前
NOTICE 8f21c2e067 Update docs and changelog 2 年 前
README.md ef774dcaa0 Update sponsored badge 2 年 前
SECURITY.md 947d65cf29 Create SECURITY.md (#1080) 2 年 前
app.json 1934025bc7 Fix logo in app.json 6 年 前
build-docs-sitemap.sh b75b6cb5a2 Add robots.txt and sitemap.txt 3 年 前
cgo_symbolizer.go 82c6718edb Combine new & old build contraints format 3 年 前
cloudbuild.yaml 3997a0fea0 Configure cloudbuild logging 3 年 前
fix_path.go 30f744e116 Try to fix path if signature is invalid 2 年 前
go.mod f6f0cbcb4f Fix detection of dead HTTP/2 connections 2 年 前
go.sum f6f0cbcb4f Fix detection of dead HTTP/2 connections 2 年 前
healthcheck.go e719c9d39b Get rid of io/ioutil usage 2 年 前
heroku.yml 6ce4201bb0 Add build arg to Heroku Dockerfile 6 年 前
landing.go 41b9cfbc6e Better landing 2 年 前
lefthook.yml 4a60556787 Use lychee to verify docs links (#1087) 2 年 前
logo.svg f0bd65aabf Optimize logo 6 年 前
main.go a9dda9ca4e Set GLib log handler 3 年 前
netlify.toml b75b6cb5a2 Add robots.txt and sitemap.txt 3 年 前
pprof.go 82c6718edb Combine new & old build contraints format 3 年 前
processing_handler.go b92de43cf3 Add support for client hints prefixed with Sec-CH-; Remove Viewport-Width header support 2 年 前
processing_handler_test.go 1a9768a2c6 Prohibit connecting to loopback, link-local multicast, and link-local unicast IP addresses by default 2 年 前
server.go 67cd992e12 Set cache-control: no-cache to heath response 2 年 前
stream.go 24f4d43a0f use "clean" HTTP transport; Use context for downloading timeout control 2 年 前

README.md

imgproxy logo

Website | Blog | Documentation | imgproxy Pro | Docker | Twitter | Discord

GH Test GH Lint Docker Pulls


imgproxy is a fast and secure standalone server for resizing and converting remote images. The guiding principles behind imgproxy are security, speed, and simplicity.

imgproxy is able to quickly and easily resize images on the fly, and it's well-equipped to handle a large amount of image resizing. imgproxy is a fast, secure replacement for all the image resizing code inside your web application (such as resizing libraries, or code that calls ImageMagick or GraphicsMagic). It's also an indispensable tool for processing images from a remote source. With imgproxy, you don’t need to repeatedly prepare images to fit your design every time it changes.

To get an even better introduction, and to dive deeper into the nitty gritty details, check out this article: imgproxy: Resize your images instantly and securely

<source
  media="(prefers-color-scheme: dark)"
  srcset="https://evilmartians.com/badges/sponsored-by-evil-martians_v2.0_for-dark-bg@2x.png"
>
<img
  src="https://evilmartians.com/badges/sponsored-by-evil-martians_v2.0@2x.png"
  alt="Sponsored by Evil Martians"
  width="236"
  height="54"
>

Simplicity

"No code is better than no code."

imgproxy only includes the must-have features for image processing, fine-tuning and security. Specifically,

  • It would be great to be able to rotate, flip and apply masks to images, but in most of the cases, it is possible — and is much easier — to do that using CSS3.
  • It may be great to have built-in HTTP caching of some kind, but it is way better to use a Content-Delivery Network or a caching proxy server for this, as you will have to do this sooner or later in the production environment.
  • It might be useful to have everything built in — such as HTTPS support — but an easy way to solve that would be just to use a proxying HTTP server such as nginx.

Speed

imgproxy takes advantage of probably the most efficient image processing library out there – libvips. It’s scary fast and comes with a very low memory footprint. Thanks to libvips, we can readily and extemporaneously process a massive amount of images.

imgproxy uses Go’s raw (no wrappers) native net/http package to omit any overhead while processing requests and provides the best possible HTTP support.

You can take a look at some benchmarking results and compare imgproxy with some well-known alternatives in our benchmark report.

Security

In terms of security, the massive processing of remote images is a potentially dangerous endeavor. There are a number of possible attack vectors, so it’s a good idea to take an approach that considers attack prevention measures as a priority. Here’s how imgproxy does this:

  • imgproxy checks the image type and its “real” dimensions when downloading. The image will not be fully downloaded if it has an unknown format or if the dimensions are too big (you can set the max allowed dimensions). This is how imgproxy protects from so called "image bombs”, like those described in this doc.

  • imgproxy protects image URLs with a signature, so an attacker cannot enact a denial-of-service attack by requesting multiple image resizes.

  • imgproxy supports authorization by HTTP header. This prevents imgproxy from being used directly by an attacker, but allows it to be used via a CDN or a caching server — simply by adding a header to a proxy or CDN config.

Usage

Check out our 📑 Documentation.

Author

Sergey "DarthSim" Alexandrovich

Special thanks

Many thanks to:

License

imgproxy is licensed under the MIT license.

See LICENSE for the full license text.

Security Contact

To report a security vulnerability, please contact us at security@imgproxy.net. We will coordinate the fix and disclosure.