Edge and origin in one
Serve static assets or proxy application traffic with bounded connection pools, backpressure, health checks, and explicit timeouts.
Rust edge server · Built for production
The web server that keeps the fast path simple.
Webship brings modern protocols, static delivery, reverse proxying, caching, security, and observability into one focused Rust runtime.
- HTTP/1.1
- HTTP/2
- HTTP/3
- WebTransport
Single deployable binary Security controls enabled by default Local-first control plane
A smaller operational surface
Everything between the network and your application.
Webship is designed for teams that want current transport protocols and explicit operational controls without assembling a stack of unrelated edge services.
Modern protocols
Negotiate HTTP/1.1, HTTP/2, and HTTP/3 with TLS 1.3, plus native WebTransport when an application needs it.
Secure defaults
Start with WAF, DDoS budgets, trusted forwarding, security headers, and authenticated control endpoints built into the runtime.
Operational clarity
Inspect metrics, access logs, request IDs, cache behavior, and upstream health without exposing the control plane publicly.
Predictable by design
One front door. Clear trust boundaries.
Public traffic terminates at Webship. Applications stay on loopback or Unix sockets, while metrics and MCP controls require explicit authentication.
- Client forwarding headers are never trusted.
- Streaming paths preserve backpressure end to end.
- WAF and per-client budgets protect every configured host.
InternetWebship
StaticApp APIs
MetricsMailMCP
Built to be operated
Fast is useful. Measurable and controllable is better.
One configuration model across TCP and QUIC.
Explicit opt-outs instead of hidden production gaps.
Keep backend services away from the public network.
Ready to put Webship at the edge?
The control console and mail operations surface are deployed separately, behind the same Webship edge.