[Open Source] Application Gateway: Nginx + HTTPS Certificates + Intranet Penetration + Image Cropping and Watermarking + Gateway Login
![[Open Source] Application Gateway: Nginx + HTTPS Certificates + Intranet Penetration + Image Cropping and Watermarking + Gateway Login](https://yy123.ink/api/img/1782590415433-8ze1sk.jpg)
1. Project Overview
Apiumc Gateway
One tool combines the features of Nginx + HTTPS Certificates + Intranet Penetration + Image Cropping and Watermarking + Gateway Login
Apiumc Gateway is a high-performance Web gateway. Starting from the underlying raw Socket communication layer, it rebuilds Web services using a multithreaded, multitasking architecture, fully leveraging the parallel processing capabilities of modern multi-core CPUs to deliver performance comparable to Nginx. Compared with multiprocess architectures, multithreading and multitasking offer greater programming flexibility and control. Based on these principles, Apiumc provides a wide range of advanced gateway applications, making it an all-in-one gateway solution. One tool combines Nginx + Gateway Login + Image Processing + Intranet Penetration + Free SSL Certificates. The entire configuration process is managed through a graphical interface, eliminating the need to deal with complicated, hard-to-remember, and error-prone command configurations.
While pursuing feature diversity, it also delivers outstanding performance. Multiple optimization mechanisms significantly improve the performance of backend applications. It is a highly valuable Web application hosting tool for enterprises and professionals, and a preferred domestic alternative to F5.
2. Open Source License
Using GPL-2.0 open-source protocol
3. Screenshots




4. Feature Overview
Intranet Penetration
Apiumc has built-in intranet penetration support. As a Web reverse proxy, Apiumc forwards requests from an external server to the local Apiumc instance on a point-to-point basis, using Host domains to distinguish requests. From Apiumc's perspective, forwarded request data is no different from ordinary network requests. It then forwards the response data back to the external server point-to-point, enabling intranet penetration through the HTTP protocol. This allows external users to access applications running on the local machine or intranet through a Web interface.
After registration, you can also enable Web VPN (intranet penetration) in either of the following two ways:
1. Enter vpn start in the Apiumc command window, as shown below:

2. In the Cloud Desktop, go to Application Settings, find the Web VPN status bar, and click it to start Web VPN, as shown below:

Once enabled, a second-level domain name will be assigned. You can use this domain name to access your local Apiumc instance from external networks. Custom domain binding is also supported. Simply configure your domain's CNAME record to point to the assigned domain, and you can access Apiumc using your own domain name.
Note: Intranet penetration features a cache mechanism that separates static and dynamic content. Static resource requests are served from the cache, while only dynamic requests pass through the tunnel. This greatly reduces bandwidth consumption and provides faster, more reliable performance. Even users on weak network connections can enjoy decent speeds, making this one of the best intranet penetration tools available.
Check the README.md documentation to learn more ...
Image Cropping
Apiumc has built-in image cropping and watermarking capabilities. It works by transforming images according to specified parameters after proxying the response, then caching the results. This enables image resizing, watermarking, format conversion, and other functions without modifying the original application. It intelligently adapts image formats based on browser support, including AVIF, WebP, and PNG, reducing image network traffic by 60%-90%. This saves substantial bandwidth costs while making applications lightning-fast and significantly improving their interactive experience.
Check the README.md documentation to learn more ...
Gateway Login
Compared with traditional single sign-on solutions, gateway login does not require modifications to third-party applications. It helps enterprises quickly implement unified login across their applications. Application identity integration is achieved through gateway technology, which supports existing enterprise applications. Identity integration for each application can be configured online without the original applications being aware of the changes. This makes coordination among application owners easier and reduces the overall cost of ownership for enterprises.
Unlike HTTPS certificates, intranet penetration, and image cropping, which introduce innovative implementations of specific functions through the gateway, unified enterprise login involves organizing and diagnosing the enterprise identity system and its applications. It also involves extracting APIs from the 7 login methods provided by Apiumc and transforming them through identity configuration. This is a professional implementation-oriented solution. Compared with traditional classic single sign-on, our gateway login technology offers greater advantages because it does not require modifications to third-party applications. It eliminates the need for secondary development to adapt each application to login protocols and further reduces enterprise coordination costs. If you would like to learn more about gateway login, feel free to contact us. We are happy to share our research findings and practical experience implementing unified login across various enterprises.
5. Tech Stack
Download and Install
- Download the version corresponding to your operating system from the distribution site or official website, then extract and run it.

- Enter the URL corresponding to the listening address in your browser and log in as an administrator. Follow the prompts to complete registration. The default administrator username is admin, and the default password is also admin.

Note: Apiumc registration is only required to facilitate HTTPS certificate applications and enable intranet penetration.
HTTPS Certificates
Apiumc has built-in HTTPS certificate management. Since DV-type domain certificates can be issued through file-based domain verification, as long as the domain points to Apiumc, it can naturally pass file verification. Leveraging this feature, the Apiumc team has partnered with well-known certificate authorities to issue free DV domain certificates for everyone. This is our contribution to building a safer network environment and making the Internet more secure.
After registration, you can apply for free HTTPS certificates in either of the following two ways.
1. Enter ssl [domain] in the Apiumc command window, as shown below:

2. Apply through Cloud Desktop -- Application Settings -- Gateway Services, as shown below:

Apiumc not only issues free domain certificates but also supports automatic renewal of expired certificates and automatic certificate deployment, freeing operations and maintenance personnel from complicated certificate deployment and update tasks.
Note: To quickly experience free HTTPS certificate issuance, enable intranet penetration. HTTPS certificates can be issued for the second-level and third-level domain names assigned through intranet penetration.