Apache HTTP Server
Ranked 3 of 8 web servers by recommenders
Long-running, mature web server that people trust for reverse proxies, shared hosting and simple sites; critics find its configuration complex and its default settings risky.
Long-running, mature web server that people trust for reverse proxies, shared hosting and simple sites; critics find its configuration complex and its default settings risky.
84 people gave an opinion
- recommend it
- 52
- criticize it
- 32
- approval share
- 62%
Recommended in 12 of 13 months
- November 2025: recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: recommended
- May 2026: recommended
- June 2026: recommended
- July 2026: recommended
- August 2026: recommended
- September 2026: recommended
- October 2026: recommended
- November 2026: not recommended (month in progress)
Owned for 10 years
Median of the 5 owners who said how long they have had it.
Each square is one year.
Why it doesn’t carry the badge
- 52 people recommend itNeeds 10 or more, met.
- 1.6 recommenders for every criticNeeds 2 to 1 or better, not met.
- Recommended in 12 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Reliable and long-running in production
“I can rely on gifts to the world like Linux, Debian, PostgreSQL, Apache, Nginx, Caddy, and Yggdrasil without any problems for decades.”
Comment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?” “It works, has been running for over a decade, and no one has ever complained about the speed.”
Comment from 15 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?” “The fact they both survived with their market share for so long is a good sign”
Comment from 14 May 2026 in “New Nginx Exploit” - Comment from 9 Jul 2026 in “Apache Shiro security framework releases 3.0.0”
- Comment from 23 Jan 2026 in “Google is ending full-web search for niche search engines”
- Comment from 15 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?”
Mature code that handles edge cases
“Nginx, Caddy, Apache, etc have found and fixed a million edge cases you'd never think of”
Comment from 19 Sep 2026 in “I built the fastest PHP webserver in the world” “Plain apache or nginx with webdav, basic auth(proven code, minimal attack surface)”
Comment from 5 Feb 2026 in “When internal hostnames are leaked to the clown” Many modules and add-ons
“It comes with the kitchen sink and has plenty of add-ons for all those extra cases you might want.”
Comment from 13 Oct 2026 in “A Modern Web App in C” “Some use Apache for a tighter integration with some modules such as PHP”
Comment from 15 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?” Default choice for hosting
“Throw it on a debian box running nginx or apache and you'll probably be set”
Comment from 21 Apr 2026 in “Laws of Software Engineering” “shared hosting services offer Apache web server by default”
Comment from 15 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?”
What people warn about
Each mark is one comment
Insecure or surprising default settings
“This is because of a deeply annoying default in Apache, where for "security reasons" the underlying script doesn't get to see auth details”
Comment from 10 May 2026 in “I Will Not Add Query Strings to Your URLs” “Apache strips out the response body for 5xx HTTP codes for security, and it's not configurable”
Comment from 12 Oct 2026 in “The gap in shared understanding of LLM capability is widening” “the default apache configs probably put a web developer in violation of the GDPR”
Comment from 13 Mar 2026 in “Nanny state discovers Linux, demands it check kids' IDs before booting” Slow and poor performance claims
“Its lack of progress, lack of features, poor performance and lack of security makes me never consider it again.”
Comment from 13 Oct 2026 in “A Modern Web App in C” “Apache and NGINX busted pissed me off when creating simple ultra fast proxies”
Comment from 24 Jul 2026 in “Ask HN: Share Your Eccentric Hobby” “nginx/apache and other prebaked servers are even slower, at 100k req/s”
Comment from 1 Sep 2026 in “Vermell – Minimal, dependency-free C++ web framework using epoll” Complex rules and configuration
“What killed Apache for me were the complexity of various rules and how challenging it is to define a proxy for a WebSocket connection.”
Comment from 16 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?” “a Caddyfile is very short, much shorter than a typical Apache or nginx configuration”
Comment from 10 Nov 2025 in “LLMs are steroids for your Dunning-Kruger”
Other web servers people recommend
The four most recommended other web servers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| nginx | 130 | 44 | 75% | 12 | 15 yrs5 owners | Approved |
| Caddy | 114 | 10 | 92% | 12 | — | Approved |
| Apache HTTP ServerThis page | 52 | 32 | 62% | 12 | 10 yrs5 owners | — |
| Zeroserve | 17 | 8 | 68% | 1 | — | — |
| FrankenPHP | 15 | 1 | 94% | 8 | — | Approved |
What people said
40 of the 100 comments that mention it, newest first. Each links to the original comment.
“It comes with the kitchen sink and has plenty of add-ons for all those extra cases you might want.”
“Its lack of progress, lack of features, poor performance and lack of security makes me never consider it again.”
“Apache strips out the response body for 5xx HTTP codes for security, and it's not configurable”
“I can rely on gifts to the world like Linux, Debian, PostgreSQL, Apache, Nginx, Caddy, and Yggdrasil without any problems for decades.”
“i like having an apache server just running on the internet with a page on it”
“I've had several outages because PHP developer dropped some Apache config to "fix" something”
“Nginx, Caddy, Apache, etc have found and fixed a million edge cases you'd never think of”
“nginx/apache and other prebaked servers are even slower, at 100k req/s”
“Apache, Twitter's Bootstrap, Pull to Refresh, React, Kubernetes, all innovative, all delivered real business value.”
“There are a few projects that can be generally trusted with internet exposure”
“Apache and NGINX busted pissed me off when creating simple ultra fast proxies”
“The precise reason I build my sites on top of Linux and Apache and Postgres is because I can switch hosts at any time.”
“Apache software is reliable in a way that many modern things are not”
“that memory issue doesn't take down the site or server, it's just the one request that dies”
“If you're using nginx/apache/literally anything that does reverse proxying correctly, this shouldn't be a problem”
“The big three C-based servers: Apache, Nginx, and lighttpd are all pretty solid”
“The fact they both survived with their market share for so long is a good sign”
“This is because of a deeply annoying default in Apache, where for "security reasons" the underlying script doesn't get to see auth details”
“Throw it on a debian box running nginx or apache and you'll probably be set”
“There are ways to run virtual hosts under different user IDs, providing isolation using more traditional Unix techniques.”
“I'm pretty sure I set up most of what "Simple S3" using with Apache2 and WebDAV at least fifteen years ago.”
“how much better Apache was than IIS when it came to operational and security issues”
“the default apache configs probably put a web developer in violation of the GDPR”
“it can also function as a reverse proxy and doesn't have the weird configuration issues”
“Plain apache or nginx with webdav, basic auth(proven code, minimal attack surface)”
“happily delivers a billion hits a month w/o breaking a sweat”
“Apache2 would fail to return 304 when also compressing some of the resources”
“Nginx and Apache are free and both can be trivially automated with ACME bot.”
“this was a pleasant discovery when I had to pick up an old Ant based project recently”
“Two other advantages of Ant that MSBuild lacks in a sane way to this day, are macros, and proper documentation.”
“If you understood the paradigm, you could write branches in Ant files simply using properties and guards on properties”
“More cost effective Apache systems were very widely being used by start-ups on tighter budgets.”
“I have used apache and nginx directory and file listing functionality with ease.”
“What killed Apache for me were the complexity of various rules and how challenging it is to define a proxy for a WebSocket connection.”
“it has never been a problem from a performance point of view”
“Some use Apache for a tighter integration with some modules such as PHP”
“It works, has been running for over a decade, and no one has ever complained about the speed.”
“shared hosting services offer Apache web server by default”
“In my Docker Swarm clusters I just use a regular Apache2 image in front of everything”
“a Caddyfile is very short, much shorter than a typical Apache or nginx configuration”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.