← Back to home
Comparison · Infra & APIs

NGINX vs Routinator

A side-by-side editorial comparison of NGINX and Routinator — release velocity, themes, recent moves, and the top alternatives to consider.

NGINX vs Routinator: at a glance

FeatureNGINXRoutinator
SectorInfra & APIsInfra & APIs
Velocity score5.05.0
Sparks · 30d00
Top themesweb-server, reverse-proxy, http3, securityrpki, aspa, bgp-security, network-infrastructure
Last editorial update1h ago4h ago
WebsiteVisit →Visit →

What is NGINX?

nginx patched HTTP/3 twice in a month and is trimming old platform code on mainline.

nginx runs a 1.31 mainline and a 1.30 stable line. After 1.31.5 added a native control API, a JSON module and predicate locations in September, the following releases were mostly security: 1.31.6 and 1.30.5 fixed an HTTP/3 buffer overflow (CVE-2026-90439), then 1.31.7 and 1.30.6 fixed five more CVEs including HTTP/3 request body injection. 1.31.8 on October 21 removed the Win32 iocp event module and fixed further HTTP/3 issues.

Read the full NGINX trajectory →

What is Routinator?

Routinator 0.16 will validate ASPA and BGPsec, and run strict, by default

Routinator is a mature RPKI validator with a slow, release-candidate-gated cadence. After a run of security work, including an external audit's four CVEs in 0.15.2 and resource-exhaustion fixes in 0.15.3, 0.16.0-rc1 changes defaults: ASPA and BGPsec are on, strict validation is on, and the old enable flags become --disable-aspa, --disable-bgpsec and --relaxed. It also adds Resource Signed Checklists (RFC 9323), SLURM v2 with ASPA filtering, and a new repository logging scheme that changes the /status JSON.

Read the full Routinator trajectory →

NGINX vs Routinator: editorial side-by-side

N
NGINX
INFRA · APIS
5.0

nginx patched HTTP/3 twice in a month and is trimming old platform code on mainline.

◆ Current state

nginx runs a 1.31 mainline and a 1.30 stable line. After 1.31.5 added a native control API, a JSON module and predicate locations in September, the following releases were mostly security: 1.31.6 and 1.30.5 fixed an HTTP/3 buffer overflow (CVE-2026-90439), then 1.31.7 and 1.30.6 fixed five more CVEs including HTTP/3 request body injection. 1.31.8 on October 21 removed the Win32 iocp event module and fixed further HTTP/3 issues.

◆ Where it's heading

HTTP/3 has needed fixes in each of the last three mainline releases, two of them CVEs. Mainline is adding features and removing legacy code at the same time, while stable gets the CVE backports.

◆ Prediction

More HTTP/3 fixes on both lines are likely; on mainline, follow-up work on the control API and JSON module is the next feature thread to watch.

R
Routinator
INFRA · APIS
5.0

Routinator 0.16 will validate ASPA and BGPsec, and run strict, by default

◆ Current state

Routinator is a mature RPKI validator with a slow, release-candidate-gated cadence. After a run of security work, including an external audit's four CVEs in 0.15.2 and resource-exhaustion fixes in 0.15.3, 0.16.0-rc1 changes defaults: ASPA and BGPsec are on, strict validation is on, and the old enable flags become --disable-aspa, --disable-bgpsec and --relaxed. It also adds Resource Signed Checklists (RFC 9323), SLURM v2 with ASPA filtering, and a new repository logging scheme that changes the /status JSON.

◆ Where it's heading

Having spent 2026 hardening the validator, the maintainers are now changing what operators get out of the box. Defaults moving toward ASPA and strictness put newer RPKI object types on equal footing with route origin validation.

◆ Prediction

A final 0.16.0 following one or more release candidates is the likely next step, as with 0.15.0.

Alternatives to NGINX and Routinator

Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either NGINX or Routinator.

See all NGINX alternatives → · See all Routinator alternatives →

Recent activity from NGINX and Routinator

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 4d agoRoutinatorRoutinator 0.16.0-rc1: ASPA, BGPsec and strict mode on by default
  2. 7d agoRoutinatorRoutinator 0.15.3 fixes resource-exhaustion paths
  3. 12d agoNGINXnginx 1.31.8 removes the Win32 iocp module, fixes HTTP/3
  4. 18d agoNGINXnginx 1.31.7 fixes five CVEs on mainline
  5. 19d agoNGINXnginx 1.30.6 fixes five CVEs including HTTP/3 injection
  6. 1mo agoNGINXnginx 1.30.5 fixes an HTTP/3 buffer overflow
  7. 1mo agoNGINXnginx 1.31.6 fixes HTTP/3 overflow and control API bugs
  8. 2mo agoNGINXrelease-1.31.5 ⚡
  9. 4mo agoRoutinatorSecurity audit closes four CVEs in 0.15.2
  10. 1y agoRoutinator0.15.1 stops empty-dataset starts and unblocks privileged ports
  11. 1y agoRoutinator0.15.0 reworks RRDP timeouts and separates repository-issue logs
  12. 1y agoRoutinator0.15.0-rc1 preview of the RRDP timeout rework

Frequently asked questions

What is the difference between NGINX and Routinator?

They serve adjacent needs but don't currently overlap on shipped themes. NGINX and Routinator are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is NGINX better than Routinator?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. NGINX and Routinator are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.

What are the best alternatives to NGINX?

Top NGINX alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "NGINX alternatives" section above for the current picks, or visit /alternatives/nginx for the full list with editorial commentary on each.

What are the best alternatives to Routinator?

Top Routinator alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Routinator alternatives" section above for the current picks, or visit /alternatives/routinator for the full list with editorial commentary on each.