Nginx (software)

Nginx (software)
Name	Nginx
Developer	Igor Sysoev; Nginx, Inc.
Initial release	2004
Operating system	Unix-like; Microsoft Windows
Genre	Web server; reverse proxy; load balancer; HTTP cache; mail proxy
License	2-clause BSD (open core for Nginx Plus)

Nginx (software) is a high-performance web server and reverse proxy originally authored by Igor Sysoev. It is widely used for serving HTTP, acting as a load balancer, and terminating TLS in large-scale deployments across companies such as Netflix, Dropbox, and Cloudflare. Nginx integrates with ecosystems including Linux distributions, FreeBSD, Amazon Web Services, and Microsoft Azure.

History

Igor Sysoev developed Nginx to address the C10k problem while working in Russia and released it publicly in 2004; early adoption grew among projects and companies in Europe, United States, and Asia. The project gained traction alongside competitors like Apache HTTP Server and Lighttpd and became central to stacks used by WordPress, Netflix, and GitHub. In 2011 the formation of Nginx, Inc. commercialized support and led to the introduction of Nginx Plus; strategic partnerships with F5 Networks and venture funding accelerated enterprise adoption. In 2019, F5 Networks announced an agreement to acquire Nginx, Inc., integrating the product line into F5’s portfolio; the open-source core continued under community stewardship with contributions from organizations such as Google, Microsoft, and Red Hat.

Architecture and design

Nginx uses an event-driven, asynchronous architecture implemented in C (programming language), employing an efficient master-worker model on Unix-like kernels. Its design contrasts with process-per-connection models used by Apache HTTP Server, enabling high concurrency on multicore systems such as servers from Intel and AMD. Nginx supports modular configuration with directives for modules developed by companies like Fastly and projects like OpenResty; it interfaces with application platforms including PHP, Python (programming language), Ruby on Rails, and Java Virtual Machine-based frameworks. For TLS termination, Nginx integrates with cryptographic libraries such as OpenSSL and alternatives used in LibreSSL and BoringSSL.

Features

Nginx provides HTTP/HTTPS serving, reverse proxying, and TCP/UDP proxy capabilities used in conjunction with services like MySQL, PostgreSQL, and Redis. It implements HTTP/1.1, HTTP/2, and support for HTTP/3 via QUIC developed by IETF and implemented by projects such as quiche and ngtcp2. Built-in load balancing algorithms include round-robin, least-connections, and IP-hash, comparable to offerings from HAProxy and Traefik. Nginx also offers static content delivery, gzip and brotli compression (introduced by standards bodies and libraries from Google and Cloudflare), request routing via regular expressions, and name-based virtual hosting used by providers like DigitalOcean and Heroku.

Deployment and use cases

Nginx is deployed as an edge server by content delivery networks such as Akamai and Cloudflare and as an ingress controller in Kubernetes clusters orchestrated by Docker and Red Hat OpenShift. It is used to accelerate web applications built on Django, Node.js, Laravel, and ASP.NET Core, and to proxy traffic for microservices managed with Istio and Envoy (software). Enterprises use Nginx for API gateway patterns similar to Kong (software) and service mesh sidecars; telecom operators and financial institutions integrate it with identity systems like OAuth 2.0 deployments and hardware from vendors including Cisco and Juniper Networks.

Performance and benchmarking

Benchmarks comparing Nginx to Apache HTTP Server, Lighttpd, and HAProxy have highlighted Nginx’s low memory footprint and high concurrent connection handling on platforms such as Linux kernel and FreeBSD. Performance tuning often involves kernel settings documented by The Linux Foundation and CPU features from Intel Xeon or AMD EPYC families, and leverages tools like wrk, ab (ApacheBench), and siege (software). Large-scale deployments at Netflix and Dropbox have published case studies demonstrating throughput and latency improvements when using Nginx with SSD-backed storage arrays from Dell EMC and networking from Arista Networks.

Security and hardening

Security best practices for Nginx include TLS configuration following guidance from IETF, certificate management with Let’s Encrypt and ACME clients from Certbot, and integrating with web application firewalls like ModSecurity and cloud services from AWS WAF. Hardening steps reference operating system projects such as SELinux and AppArmor and container security projects like gVisor and Kata Containers. Incident responses have been coordinated with organizations including US-CERT and security vendors like CrowdStrike and Palo Alto Networks when vulnerabilities—often in dependencies like OpenSSL—are disclosed.

Development, licensing, and ecosystem

Nginx’s core is distributed under a permissive 2-clause BSD-style license, while commercial features are offered through Nginx Plus under an open-core business model adopted by companies such as Red Hat and Canonical for enterprise packaging. The project’s ecosystem includes modules and extensions from OpenResty, Lua integrations courtesy of contributors familiar with Lua (programming language), and orchestration tooling from Ansible, Chef (software), and Puppet (software). Community and corporate contributions come via repositories hosted on GitHub and continuous integration systems used by organizations like Travis CI and Jenkins. Nginx remains a core component in modern internet infrastructure alongside projects like Docker, Kubernetes, HAProxy, and Envoy (software).

Category:Web server software