You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Alibek Omarov 850426c6ce ratelimit: implement config reading 1 year ago
conf Rework worker startup/privsep config. 1 year ago
examples Change how routes are configured in Kore. 1 year ago
include/kore ratelimit: add skeleton types 1 year ago
kodev Major Python API improvements. 2 years ago
misc Add support for setting curlopts in kore.httpclient. 1 year ago
share/man Fix a couple of typos in various places. 2 years ago
src ratelimit: implement config reading 1 year ago
tools/kore-serve Make sure kore-serve builds. 2 years ago
.gitignore Add seccomp syscall filtering to kore. 3 years ago
BEERS add Matthew to BEERS 1 year ago
LICENSE bump copyright year. 2 years ago
Makefile ratelimit: add skeleton types 1 year ago Improve TLS settings and dependencies. 2 years ago add minisign public key 4 years ago


Kore ( is an easy to use web application platform for writing scalable web APIs in C. Its main goals are security, scalability and allowing rapid development and deployment of such APIs.

Because of this Kore is an ideal candidate for building robust, scalable and secure web things.

Key Features

  • Supports SNI
  • Supports HTTP/1.1
  • Websocket support
  • Privseps by default
  • TLS enabled by default
  • Optional background tasks
  • Built-in parameter validation
  • Optional asynchronous PostgreSQL support
  • Optional support for page handlers in Python
  • Reload private keys and certificates on-the-fly
  • Automatic X509 certificates via ACME (with privsep)
  • Private keys isolated in separate process (RSA and ECDSA)
  • Default sane TLS ciphersuites (PFS in all major browsers)
  • Modules can be reloaded on-the-fly, even while serving content
  • Worker processes sandboxed on OpenBSD (pledge) and Linux (seccomp)
  • Event driven (epoll/kqueue) architecture with per CPU worker processes
  • Build your web application as a precompiled dynamic library or single binary

And lots more.


  • Kore is licensed under the ISC license


Read the documentation


Read the benchmarks blog post.

Platforms supported

  • Linux
  • OpenBSD
  • FreeBSD
  • MacOS

Kore only supports x64, arm and aarch64 architectures.

Building Kore

Clone this repository or get the latest release at


  • openssl 1.1.1 or libressl 3.x

Requirement for asynchronous curl (optional)

  • libcurl (7.64.0 or higher)

Requirements for background tasks (optional)

  • pthreads

Requirements for pgsql (optional)

  • libpq

Requirements for python (optional)

  • Python 3.6+

Normal compilation and installation:

$ cd kore
$ make
# make install

If you would like to build a specific flavor, you can enable those by setting a shell environment variable before running make.

  • ACME=1 (compiles in ACME support)
  • CURL=1 (compiles in asynchronous curl support)
  • TASKS=1 (compiles in task support)
  • PGSQL=1 (compiles in pgsql support)
  • DEBUG=1 (enables use of -d for debug)
  • NOHTTP=1 (compiles Kore without HTTP support)
  • NOOPT=1 (disable compiler optimizations)
  • JSONRPC=1 (compiles in JSONRPC support)
  • PYTHON=1 (compiles in the Python support)

Note that certain build flavors cannot be mixed together and you will just be met with compilation errors.

Example applications

You can find example applications under examples/.

The examples contain a README file with instructions on how to build or use them.

Mailing lists - Send patches here, preferably inline. - Questions regarding kore.

If you want to signup to those mailing lists send an empty email to

Other mailboxes (these are not mailing lists): - Mail this email if you think you found a security problem. - If your company would like to sponsor part of Kore development.

More information can be found on