Scroll to navigation

NGHTTPD(1) nghttp2 NGHTTPD(1)


nghttpd - HTTP/2 server


nghttpd [OPTION]... <PORT> [<PRIVATE_KEY> <CERT>]


HTTP/2 server

Specify listening port number.

Set path to server's private key. Required unless --no-tls is specified.

Set path to server's certificate. Required unless --no-tls is specified.


The address to bind to. If not specified the default IP address determined by getaddrinfo is used.

Run in a background. If -D is used, the current working directory is changed to '/'. Therefore if this option is used, -d option must be specified.

The server sends a client certificate request. If the client did not return a certificate, the handshake is terminated. Currently, this option just requests a client certificate and does not verify it.

Specify document root. If this option is not specified, the document root is the current working directory.

Print debug information such as reception/ transmission of frames and name/value pairs.

Disable SSL/TLS.

Specify decoder header table size.

Specify encoder header table size. The decoder (client) specifies the maximum dynamic table size it accepts. Then the negotiated dynamic table size is the minimum of this option value and the value which client specified.

Force colored log output.

Push resources <PUSH_PATH>s when <PATH> is requested. This option can be used repeatedly to specify multiple push configurations. <PATH> and <PUSH_PATH>s are relative to document root. See --htdocs option. Example: -p/=/foo.png -p/doc=/bar.css

Add at most <N> bytes to a frame payload as padding. Specify 0 to disable padding.

Set the maximum number of the concurrent streams in one HTTP/2 session.

Default: 100

Set the number of worker threads.

Default: 1

Make error response gzipped.

Sets the stream level initial window size to 2**<N>-1.

Sets the connection level initial window size to 2**<N>-1.

Path to file that contains DH parameters in PEM format. Without this option, DHE cipher suites are not available.

Start sending response when request HEADERS is received, rather than complete request is received.

Add a trailer header to a response. <HEADER> must not include pseudo header field (header field name starting with ':'). The trailer is sent only if a response has body part. Example: --trailer 'foo: bar'.

Display the incoming traffic in hexadecimal (Canonical hex+ASCII display). If SSL/TLS is used, decrypted data are used.

Send back uploaded content if method is POST or PUT.

Path to file that contains MIME media types and the extensions that represent them.

Default: /etc/mime.types

Don't send content-length header field.

Display version information and exit.

Display this help and exit.

The <SIZE> argument is an integer and an optional unit (e.g., 10K is 10 * 1024). Units are K, M and G (powers of 1024).


nghttp(1), nghttpx(1), h2load(1)


Tatsuhiro Tsujikawa


2012, 2015, 2016, Tatsuhiro Tsujikawa

February 2, 2021 1.43.0