May 2022 Web Server Survey

In which May 2022 Poll from which we received responses 1,155,729,496 sites about 273,593,762 unique domains and 12,069,814 computers connected to the Internet. This equates to a loss of 5.23 million websites but a gain of 1.63 million domains and 95,200 computers.

nginx gained the largest number of domains (+1.24 million) and also a significant number of internet-enabled computers (+21,500), further cementing its lead in both metrics. The total number of domains powered by nginx is now 75.0 million (+1.68%) and the market share has increased to 27.4% (+0.29). In terms of internet-enabled computers, nginx now has a total of 4.60 million; and although its leading market share declined slightly to 38.1%, Apache’s declined somewhat further, widening the gap between the two to 9.54 percentage points.

nginx continues to lead with a 30.7% share of all websites, despite losing the largest amount this month (-6.57 million). Apache follows with a share of 23.0%, but also lost many pages (-2.32 million). The biggest gain on this metric was Google, which added 2.96 million websites to its total and increased its market share to 4.14%. LiteSpeed ​​saw the second-biggest gain at 1.26 million pages, slightly ahead of Google with a 4.35% share.

Google and LiteSpeed ​​also made the only significant gains in the active websites metric, with Google gaining 977,000 and LiteSpeed ​​151,000. Google has a bigger lead on this metric, with a 9.49% market share versus LiteSpeed’s 4.60%.

Cloudflare continues to climb the top million websites. It added another 1,822 sites this month and now accounts for more than 20% of the top million sites for the first time. Meanwhile, both Apache and nginx each lost more than a thousand sites in the top million, making it increasingly likely that Cloudflare could gain spots by the end of the year. Apache, nginx, and Cloudflare currently have shares in top million sites of 22.8%, 21.7%, and 20.0%, respectively.

A surprise this month was that the largest computer growth was not recorded by nginx but by the web server awselb (Amazon Web Services Elastic Load Balancing), which added 26,200 computers to a total of 378,000. These computers likely constitute only a small fraction of the AWS infrastructure used by the 1.86 million sites served by these computers, as AWS ELB achieves fault tolerance and scalability by automatically balancing incoming application traffic across multiple destinations and as well can distribute traffic across multiple AWS availability zones.

Supplier News

• nginx 1.22.0 was released on May 24, 2022. This is the first release on the 1.22.x stable branch and includes new features and bug fixes from the 1.21.x main branch. Notable new features include support for OpenSSL 3.0 and the PCRE2 library, as well as some security improvements such as:
• njs 0.7.4 was also released on May 24, 2022. This version of the nginx JavaScript-based scripting language includes several bug fixes and adds advanced instructions for configuring Get API.
• Apache tomcat 9.0.63, 10.0.21 and 10.1.0-M15 (alpha) were released on May 16, 2022. Tomcat 8.5.79 was later released on May 23. Among other changes, all of these versions include a new error message that appears when the Linux kernel duplicate accept bug is detected. This change follows identification of the root cause of the bug along with the kernel version containing the fix.
• OpenResty 1.21.4.1 was released on May 18, 2022. This web platform now uses nginx 1.21.4 mainline as its core and includes many others New propertiesincluding support for BoringSSL.
• On May 3, 2022, Microsoft announced the general availability of its next generation Web Application Firewall (WAF) engine. on Azure Application Gateway. It uses the Open Web Application Security Project (OWASP) Core Rule Set 3.2 (CRS 3.2), which is designed to provide increased coverage for web vulnerabilities, reduce false positives, and protect against specific vulnerabilities such as Log4J and SpringShell.
• Microsoft has too expanded its Azure Migration and Modernization Program (AMMP) to encourage more customers to move their web applications to Azure. Azure also offers free Extended security updates for SQL Server 2012 and Windows Server 2012, allowing more time to modernize legacy applications for an additional three years beyond the 10 years granted by Microsoft Support.
• Cloudflare made several new features available in May, including:

For more information, see Active sites