Sign inSign up
Nginx Exporter

dhi.io/nginx-exporter

Nginx Exporter

CIS
linux/amd64
linux/arm64

Nginx exporter makes it possible to monitor Nginx or Nginx Plus with Prometheus by exposing metrics in Prometheus format.

Image

pushed 17 hours ago

View image detail
Platforms

linux/amd64, linux/arm64

Size

32.07 MB

for linux/amd64

Packages

126

for linux/amd64

Support

Active support

Tools included

-

What's includedWhy it matters
SLSA Provenance

Build Level 3

Tamper-evident proof of how and from what sources this image was built. Build Level 3 is the highest the SLSA build track defines.

SBOM

CycloneDX SBOM + SPDX SBOM

A software bill of materials in both CycloneDX and SPDX formats so it drops straight into your existing tooling. Audit exactly what you're shipping.

VEX

A Vulnerability Exploitability exchange document, Docker's assessment of which CVEs actually affect this image and which don't apply, so you can focus on real risk instead of chasing false positives.

DHI Image Sources

Available

A link to everything used to build the image, package source code, Git repos, and build files, so you can audit or reproduce the build and stay compliant with open source licenses.

CVEs
0
0
0
1
0

Every known vulnerability in this image, shown in full rather than hidden. The VEX data flags which ones actually apply, so you can tell real exposure from noise before you ship.

Changelog

Exactly what changed in this build, down to the package bumps and fixes behind the version you're pulling.

Secrets scan

Verifies no keys, tokens, or credentials were accidentally baked into the image.

Virus scan

The image layers were scanned for known malware signatures before publishing.


About Nginx Exporter

Nginx Exporter is an official Nginx tool that makes it possible to monitor Nginx and Nginx Plus with Prometheus by exposing key metrics in Prometheus format. Developed and maintained by Nginx Inc., it provides a reliable way to collect and export Nginx metrics for monitoring, alerting, and observability in cloud-native environments.

The exporter collects metrics from:

  • Nginx Open Source: Basic connection and request metrics via the stub_status module
  • Nginx Plus: Comprehensive metrics including upstream health, cache statistics, and detailed connection information via the Nginx Plus API
  • Nginx Ingress Controller: Kubernetes-specific metrics when deployed as an ingress controller

Key metrics exposed include:

  • Connection metrics: Active, accepted, handled connections, and connection states
  • Request metrics: Total requests, requests per second, and request processing time
  • Upstream metrics (Nginx Plus): Backend server health, response times, and load balancing statistics
  • Cache metrics (Nginx Plus): Hit/miss ratios, cache size, and performance statistics
  • SSL/TLS metrics: Certificate information and SSL handshake statistics
  • Zone metrics: Per-location and per-server zone statistics

Key features include:

  • Simple deployment: Single binary with minimal configuration requirements
  • Prometheus native: Exports metrics in standard Prometheus exposition format
  • High performance: Low overhead monitoring with efficient metric collection
  • Kubernetes ready: Native support for Kubernetes deployments and service discovery
  • Secure: Support for TLS/SSL connections to Nginx Plus API endpoints
  • Flexible configuration: Configurable scrape intervals and metric filtering

Advanced capabilities:

  • Custom metric labels: Add custom labels for better metric organization
  • Multiple Nginx instances: Monitor multiple Nginx instances from a single exporter
  • Health checks: Built-in health check endpoint for monitoring the exporter itself
  • Graceful shutdown: Proper cleanup and shutdown procedures for container environments

For more details, visit https://github.com/nginx/nginx-prometheus-exporter.

About Docker Hardened Images

Docker Hardened Images are built to meet the highest security and compliance standards. They provide a trusted foundation for containerized workloads by incorporating security best practices from the start.

Why use Docker Hardened Images?

These images are published with zero-known CVEs, include signed provenance, and come with a complete Software Bill of Materials (SBOM) and VEX metadata. They're designed to secure your software supply chain while fitting seamlessly into existing Docker workflows.

Trademarks

This listing is prepared by Docker. All third-party product names, logos, and trademarks are the property of their respective owners and are used solely for identification. Docker claims no interest in those marks, and no affiliation, sponsorship, or endorsement is implied.