Open source · Apache-2.0
HTTP server and reverse proxy in Rust
ExyonQ is a modular HTTP server and reverse proxy written in Rust: static files with per-MIME caching, FastCGI to PHP-FPM, TLS with automatic certificates, HTTP/2 and HTTP/3, and a native WAF. This site is served by ExyonQ.
What's inside
- Static files with per-MIME caching, compression (br, gzip, zstd) and in-memory preload.
- HTTP reverse proxy and native FastCGI for PHP-FPM and WordPress, with a front controller fallback for pretty permalinks.
- Full-page cache with keys over query, cookies and headers,
stale-if-errorand purge by URL, site, generation or tag. - TLS with ACME HTTP-01 (including across two processes), automatic renewal and SNI certificate selection; HTTP/2 and HTTP/3.
- Native WAF against SQLi, XSS, path traversal, command injection, header anomalies and bots; basic auth and per-route limits.
- External auth (JWT/OAuth via an
auth_requestsubrequest) and per-client throttling with grace windows and 429s. - Proof-of-work, reCAPTCHA or hCaptcha challenge, and OWASP CRS v4.25 with per-rule metrics and a detection-only mode.
- TOML configuration validated by
exyonq validateand reloaded per generation without half-served requests; migration from nginx and Apache.
The full reference, with copy-ready configuration examples, is at exyonq.dev.
Get ExyonQ
Published images (latest: 0.9.0; 0.9.1 images pending):
docker pull ghcr.io/exyonq/exyonq:0.9.0 docker pull ghcr.io/exyonq/exyonq-wordpress:0.9.0
Official binaries and packages (Linux amd64/arm64, macOS arm64):
curl -LO https://github.com/ExyonQ/ExyonQ/releases/download/v0.9.1/exyonq-0.9.1-linux-amd64.tar.gz tar xzf exyonq-0.9.1-linux-amd64.tar.gz sudo install -m 0755 usr/bin/exyonq usr/bin/exyonqctl /usr/bin/
Build from source:
cargo build -p exyonq -p exyonqctl --release --locked
Releases and binaries at github.com/ExyonQ/ExyonQ/releases. ExyonQ publishes no latest tag: always pin the version.
We also make EQProxy
A Rust load balancer and reverse proxy for the edge: health checks, TLS/mTLS, HTTP cache and reload without dropping traffic. Its information lives at eqproxy.org.
Contact
Security reports: security@exyonq.org
Open source · Apache-2.0
HTTP server and reverse proxy in Rust
ExyonQ is a modular HTTP server and reverse proxy written in Rust: static files with per-MIME caching, FastCGI to PHP-FPM, TLS with automatic certificates, HTTP/2 and HTTP/3, and a native WAF. This site is served by ExyonQ.
What's inside
- Static files with per-MIME caching, compression (br, gzip, zstd) and in-memory preload.
- HTTP reverse proxy and native FastCGI for PHP-FPM and WordPress, with a front-controller fallback for pretty permalinks.
- Full-page cache with keys over query, cookies and headers,
stale-if-errorand purge by URL, site, generation or tag. - TLS with ACME HTTP-01 (including across two processes), automatic renewal and SNI certificate selection; HTTP/2 and HTTP/3.
- Native WAF against SQLi, XSS, path traversal, command injection, header anomalies and bots; basic auth and per-route limits.
- External auth (JWT/OAuth via an
auth_requestsubrequest) and per-client throttling with grace windows and 429s. - Proof-of-work, reCAPTCHA or hCaptcha challenge, and OWASP CRS v4.25 with per-rule metrics and a detection-only mode.
- TOML configuration validated by
exyonq validateand reloaded per generation without half-served requests; migration from nginx and Apache.
The full reference, with copy-ready configuration examples, is at exyonq.dev.
Get ExyonQ
Published images (latest: 0.9.0; 0.9.1 images pending):
docker pull ghcr.io/exyonq/exyonq:0.9.0 docker pull ghcr.io/exyonq/exyonq-wordpress:0.9.0
Official binaries and packages (Linux amd64/arm64, macOS arm64):
curl -LO https://github.com/ExyonQ/ExyonQ/releases/download/v0.9.1/exyonq-0.9.1-linux-amd64.tar.gz tar xzf exyonq-0.9.1-linux-amd64.tar.gz sudo install -m 0755 usr/bin/exyonq usr/bin/exyonqctl /usr/bin/
Build from source:
cargo build -p exyonq -p exyonqctl --release --locked
Releases and binaries at github.com/ExyonQ/ExyonQ/releases. ExyonQ publishes no latest tag: always pin the version.
We also make EQProxy
A Rust load balancer and reverse proxy for the edge: health checks, TLS/mTLS, HTTP cache and reload without dropping traffic. Its information lives at eqproxy.org.
Contact
Security reports: security@exyonq.org