Hacker ApprovedDepartments

Apache HTTP Server

Ranked 3 of 8 web servers by recommenders

Long-running, mature web server that people trust for reverse proxies, shared hosting and simple sites; critics find its configuration complex and its default settings risky.

Long-running, mature web server that people trust for reverse proxies, shared hosting and simple sites; critics find its configuration complex and its default settings risky.

84 people gave an opinion

recommend it
52
criticize it
32
approval share
62%
Each figure is one person. RecommendsCriticizes

Recommended in 12 of 13 months

  1. November 2025: recommended
  2. December 2025: recommended
  3. January 2026: recommended
  4. February 2026: recommended
  5. March 2026: recommended
  6. April 2026: recommended
  7. May 2026: recommended
  8. June 2026: recommended
  9. July 2026: recommended
  10. August 2026: recommended
  11. September 2026: recommended
  12. October 2026: recommended
  13. November 2026: not recommended (month in progress)

Owned for 10 years

Median of the 5 owners who said how long they have had it.

Each square is one year.

Why it doesn’t carry the badge

  • 52 people recommend itNeeds 10 or more, met.
  • 1.6 recommenders for every criticNeeds 2 to 1 or better, not met.
  • Recommended in 12 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Reliable and long-running in production

    “I can rely on gifts to the world like Linux, Debian, PostgreSQL, Apache, Nginx, Caddy, and Yggdrasil without any problems for decades.”

    Comment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

    “It works, has been running for over a decade, and no one has ever complained about the speed.”

    Comment from 15 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?”

    “The fact they both survived with their market share for so long is a good sign”

    Comment from 14 May 2026 in “New Nginx Exploit”
  • Mature code that handles edge cases

    “Nginx, Caddy, Apache, etc have found and fixed a million edge cases you'd never think of”

    Comment from 19 Sep 2026 in “I built the fastest PHP webserver in the world”

    “Plain apache or nginx with webdav, basic auth(proven code, minimal attack surface)”

    Comment from 5 Feb 2026 in “When internal hostnames are leaked to the clown”
  • Many modules and add-ons

    “It comes with the kitchen sink and has plenty of add-ons for all those extra cases you might want.”

    Comment from 13 Oct 2026 in “A Modern Web App in C”

    “Some use Apache for a tighter integration with some modules such as PHP”

    Comment from 15 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?”
  • Default choice for hosting

    “Throw it on a debian box running nginx or apache and you'll probably be set”

    Comment from 21 Apr 2026 in “Laws of Software Engineering”

    “shared hosting services offer Apache web server by default”

    Comment from 15 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?”

What people warn about

Each mark is one comment

  • Insecure or surprising default settings

    “This is because of a deeply annoying default in Apache, where for "security reasons" the underlying script doesn't get to see auth details”

    Comment from 10 May 2026 in “I Will Not Add Query Strings to Your URLs”

    “Apache strips out the response body for 5xx HTTP codes for security, and it's not configurable”

    Comment from 12 Oct 2026 in “The gap in shared understanding of LLM capability is widening”

    “the default apache configs probably put a web developer in violation of the GDPR”

    Comment from 13 Mar 2026 in “Nanny state discovers Linux, demands it check kids' IDs before booting”
  • Slow and poor performance claims

    “Its lack of progress, lack of features, poor performance and lack of security makes me never consider it again.”

    Comment from 13 Oct 2026 in “A Modern Web App in C”

    “Apache and NGINX busted pissed me off when creating simple ultra fast proxies”

    Comment from 24 Jul 2026 in “Ask HN: Share Your Eccentric Hobby”

    “nginx/apache and other prebaked servers are even slower, at 100k req/s”

    Comment from 1 Sep 2026 in “Vermell – Minimal, dependency-free C++ web framework using epoll”
  • Complex rules and configuration

    “What killed Apache for me were the complexity of various rules and how challenging it is to define a proxy for a WebSocket connection.”

    Comment from 16 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?”

    “a Caddyfile is very short, much shorter than a typical Apache or nginx configuration”

    Comment from 10 Nov 2025 in “LLMs are steroids for your Dunning-Kruger”

Other web servers people recommend

The four most recommended other web servers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

Apache HTTP Server compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
nginx1304475%1215 yrs5 ownersApproved
Caddy1141092%12—Approved
Apache HTTP ServerThis page523262%1210 yrs5 owners—
Zeroserve17868%1——
FrankenPHP15194%8—Approved
See all 8 web servers, ranked

What people said

40 of the 100 comments that mention it, newest first. Each links to the original comment.

“It comes with the kitchen sink and has plenty of add-ons for all those extra cases you might want.”

RecommendsComment from 13 Oct 2026 in “A Modern Web App in C”

“Its lack of progress, lack of features, poor performance and lack of security makes me never consider it again.”

CriticizesComment from 13 Oct 2026 in “A Modern Web App in C”

“Apache strips out the response body for 5xx HTTP codes for security, and it's not configurable”

CriticizesComment from 12 Oct 2026 in “The gap in shared understanding of LLM capability is widening”

“I can rely on gifts to the world like Linux, Debian, PostgreSQL, Apache, Nginx, Caddy, and Yggdrasil without any problems for decades.”

RecommendsComment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

“i like having an apache server just running on the internet with a page on it”

RecommendsComment from 9 Oct 2026 in “Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?”

“I've had several outages because PHP developer dropped some Apache config to "fix" something”

MixedComment from 19 Sep 2026 in “I built the fastest PHP webserver in the world”

“Nginx, Caddy, Apache, etc have found and fixed a million edge cases you'd never think of”

RecommendsComment from 19 Sep 2026 in “I built the fastest PHP webserver in the world”

“nginx/apache and other prebaked servers are even slower, at 100k req/s”

CriticizesComment from 1 Sep 2026 in “Vermell – Minimal, dependency-free C++ web framework using epoll”

“Apache, Twitter's Bootstrap, Pull to Refresh, React, Kubernetes, all innovative, all delivered real business value.”

RecommendsComment from 18 Aug 2026 in “What Happens If OpenAI Dies?”

“There are a few projects that can be generally trusted with internet exposure”

RecommendsComment from 28 Jul 2026 in “Fast Remediation Is the New Trust Model (JFrog and OpenAI Zero-Day Findings)”

“Apache and NGINX busted pissed me off when creating simple ultra fast proxies”

CriticizesComment from 24 Jul 2026 in “Ask HN: Share Your Eccentric Hobby”

“The precise reason I build my sites on top of Linux and Apache and Postgres is because I can switch hosts at any time.”

RecommendsComment from 13 Jul 2026 in “Control the Ideas, Not the Code”

“Apache software is reliable in a way that many modern things are not”

RecommendsComment from 9 Jul 2026 in “Apache Shiro security framework releases 3.0.0”

“that memory issue doesn't take down the site or server, it's just the one request that dies”

RecommendsComment from 8 Jun 2026 in “Learn PHP in 2026 (Yes, Really)”

“If you're using nginx/apache/literally anything that does reverse proxying correctly, this shouldn't be a problem”

RecommendsComment from 27 May 2026 in “BadHost – CVE-2026-48710 Starlette Host-Header Auth Bypass”

“The big three C-based servers: Apache, Nginx, and lighttpd are all pretty solid”

RecommendsComment from 14 May 2026 in “New Nginx Exploit”

“The fact they both survived with their market share for so long is a good sign”

RecommendsComment from 14 May 2026 in “New Nginx Exploit”

“This is because of a deeply annoying default in Apache, where for "security reasons" the underlying script doesn't get to see auth details”

CriticizesComment from 10 May 2026 in “I Will Not Add Query Strings to Your URLs”

“Throw it on a debian box running nginx or apache and you'll probably be set”

RecommendsComment from 21 Apr 2026 in “Laws of Software Engineering”

“There are ways to run virtual hosts under different user IDs, providing isolation using more traditional Unix techniques.”

RecommendsComment from 20 Apr 2026 in “Vercel April 2026 security incident”

“I'm pretty sure I set up most of what "Simple S3" using with Apache2 and WebDAV at least fifteen years ago.”

RecommendsComment from 13 Apr 2026 in “I Just Want Simple S3”

“how much better Apache was than IIS when it came to operational and security issues”

RecommendsComment from 26 Mar 2026 in “Wine 11 rewrites how Linux runs Windows games at kernel with massive speed gains”

“the default apache configs probably put a web developer in violation of the GDPR”

CriticizesComment from 13 Mar 2026 in “Nanny state discovers Linux, demands it check kids' IDs before booting”

“it can also function as a reverse proxy and doesn't have the weird configuration issues”

RecommendsComment from 8 Mar 2026 in “My Homelab Setup”

“Plain apache or nginx with webdav, basic auth(proven code, minimal attack surface)”

RecommendsComment from 5 Feb 2026 in “When internal hostnames are leaked to the clown”

“happily delivers a billion hits a month w/o breaking a sweat”

RecommendsComment from 23 Jan 2026 in “Google is ending full-web search for niche search engines”

“Apache2 would fail to return 304 when also compressing some of the resources”

MixedComment from 24 Dec 2025 in “HTTP Caching, a Refresher”

“Nginx and Apache are free and both can be trivially automated with ACME bot.”

RecommendsComment from 15 Dec 2025 in “Upcoming Changes to Let's Encrypt Certificates”

“this was a pleasant discovery when I had to pick up an old Ant based project recently”

RecommendsComment from 5 Dec 2025 in “CSS now has an if() conditional function”

“Two other advantages of Ant that MSBuild lacks in a sane way to this day, are macros, and proper documentation.”

RecommendsComment from 5 Dec 2025 in “CSS now has an if() conditional function”

“If you understood the paradigm, you could write branches in Ant files simply using properties and guards on properties”

RecommendsComment from 5 Dec 2025 in “CSS now has an if() conditional function”

“More cost effective Apache systems were very widely being used by start-ups on tighter budgets.”

RecommendsComment from 4 Dec 2025 in “30 years ago today "Netscape and Sun announce JavaScript"”

“I have used apache and nginx directory and file listing functionality with ease.”

RecommendsComment from 17 Nov 2025 in “Google is killing the open web, part 2”

“What killed Apache for me were the complexity of various rules and how challenging it is to define a proxy for a WebSocket connection.”

CriticizesComment from 16 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?”

“it has never been a problem from a performance point of view”

RecommendsComment from 15 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?”

“Some use Apache for a tighter integration with some modules such as PHP”

MixedComment from 15 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?”

“It works, has been running for over a decade, and no one has ever complained about the speed.”

RecommendsComment from 15 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?”

“shared hosting services offer Apache web server by default”

MixedComment from 15 Nov 2025 in “Why is Apache still popular even as Nginx has proven its mettle on performance?”

“In my Docker Swarm clusters I just use a regular Apache2 image in front of everything”

RecommendsComment from 14 Nov 2025 in “Kubernetes Ingress Nginx is retiring”

“a Caddyfile is very short, much shorter than a typical Apache or nginx configuration”

CriticizesComment from 10 Nov 2025 in “LLMs are steroids for your Dunning-Kruger”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.