Skip to main content

imgproxy

imgproxy is available in the NetActuate Marketplace as a one-click, open-source appliance you can deploy into any NetActuate PoP. Fast, secure, headless image processing API: resize, crop and convert on the fly. It is grouped under the Media & Streaming category.

What It Does​

imgproxy is an open-source, high-performance server for on-the-fly image processing. It resizes, crops, and converts images (WebP, AVIF, JPEG, PNG, GIF) straight from a source URL, so you serve exactly the format and dimensions each client needs without pre-generating or storing thumbnails.

Key features

  • On-the-fly resize, crop, smart-crop, and format conversion powered by libvips
  • Modern formats: WebP and AVIF encoding with automatic content negotiation
  • Secure by design: signed URLs, source-address restrictions, and strict limits on source resolution and file size
  • Headless HTTP API with a /health endpoint for load balancers and probes
  • No database and no local storage: images are fetched, processed, and streamed

Use cases

  • A thumbnailing and format-conversion tier in front of your object storage or CDN
  • Responsive images for web and mobile without a build-time asset pipeline
  • Offloading image transforms from an application backend to a dedicated service

Why run it on the NetActuate edge Placing imgproxy in a PoP near your users shortens the delivery path for processed images and lets you cache transformed variants close to the request, cutting latency and origin egress.

Deployed from the NetActuate marketplace, imgproxy boots pre-configured from your seeded values: the URL-signing key and salt are rendered at first boot (any printable seed value is accepted and hex-encoded to a valid imgproxy key, or a fresh random pair is generated when none is seeded) so signed-URL protection is on out of the box. The service serves the API over plain HTTP on the instance IP; put a TLS-terminating proxy in front for public traffic (a documented follow-up).

Vendor and Project​

imgproxy is an open-source project, offered here under the Open Source listing with best-effort community support.

NetActuate supports the underlying infrastructure. Application-level support follows the listing SLA class (open-source, best effort).

Sizing​

vCPURAMDisk
Minimum11 GB10 GB
Recommended22 GB20 GB

No VPU (hardware acceleration) is required for this appliance. Choose a size at deploy based on your expected load.

Configuration Fields​

When you deploy, you provide these fields. They are written into the appliance at first boot.

FieldRequiredDefaultNotes
URL-signing keyNogeneratedKey for signing image URLs. Generated for you and stored in your secret list if not provided; never echoed back. Any printable value is accepted and hex-encoded to a valid imgproxy key (8 to 128 chars). Stored write-only in your account secret list
URL-signing saltNogeneratedSalt for signing image URLs. Generated for you and stored in your secret list if not provided; never echoed back. Any printable value is accepted and hex-encoded to a valid imgproxy salt (8 to 128 chars). Stored write-only in your account secret list
API portNo8080Host port the image API is published on (default 8080).

Using the Appliance​

Deploy in minutes

  1. Check health. The API answers at http://YOUR_VM_IP:8080/health and returns imgproxy is running. A built-in info page is served at http://YOUR_VM_IP:8080/ .
  2. Get your signing key. imgproxy protects every processing URL with a signature. SSH into the instance and run sudo cat /etc/marketplace/imgproxy-signing.env to read the exact hex IMGPROXY_KEY and IMGPROXY_SALT for this appliance (derived from your seeded values).
  3. Process an image. Build a signed URL of the form http://YOUR_VM_IP:8080/<signature>/rs:fill:300:300/plain/<source-image-url> using your key and salt (see https://docs.imgproxy.net/usage/signing_url ), then request it. imgproxy fetches, transforms, and streams the result.

Exposure posture: the appliance serves plain HTTP on port 8080. For public traffic, put a TLS-terminating proxy in front (or a real hostname with a certificate).

FAQ​

Is there a software license fee? No. imgproxy is open source and free to run. You pay only for the NetActuate infrastructure and bandwidth.

Where is the web interface? On port 8080 at path /health by default.

Who supports it? NetActuate operates the underlying infrastructure. The application itself is community-supported open source (best-effort SLA class).

Version and Changelog​

VersionStatusReleased
3.29.0Current (default)2026-07-13

Deploy​

Need Help?​

Contact support@netactuate.com or open a support ticket from the portal.