惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Google DeepMind News
Google DeepMind News
F
Fortinet All Blogs
阮一峰的网络日志
阮一峰的网络日志
Apple Machine Learning Research
Apple Machine Learning Research
爱范儿
爱范儿
WordPress大学
WordPress大学
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
J
Java Code Geeks
罗磊的独立博客
S
SegmentFault 最新的问题
V
V2EX
V
Visual Studio Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
美团技术团队
博客园 - 三生石上(FineUI控件)
Stack Overflow Blog
Stack Overflow Blog
Y
Y Combinator Blog
MyScale Blog
MyScale Blog
D
Docker
Google DeepMind News
Google DeepMind News
Blog — PlanetScale
Blog — PlanetScale
M
Microsoft Research Blog - Microsoft Research
Martin Fowler
Martin Fowler
S
Secure Thoughts
B
Blog
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
www.infosecurity-magazine.com
www.infosecurity-magazine.com
Recent Announcements
Recent Announcements
MongoDB | Blog
MongoDB | Blog
C
Cisco Blogs
C
CERT Recently Published Vulnerability Notes
T
True Tiger Recordings
GbyAI
GbyAI
P
Proofpoint News Feed
P
Privacy International News Feed
Jina AI
Jina AI
The Cloudflare Blog
I
Intezer
AWS News Blog
AWS News Blog
Hacker News - Newest:
Hacker News - Newest: "LLM"
S
Security Archives - TechRepublic
NISL@THU
NISL@THU
The Register - Security
The Register - Security
Recent Commits to openclaw:main
Recent Commits to openclaw:main
P
Palo Alto Networks Blog
S
Schneier on Security
L
LINUX DO - 热门话题
C
CXSECURITY Database RSS Feed - CXSecurity.com
Security Latest
Security Latest
C
Cybersecurity and Infrastructure Security Agency CISA

DEV Community

Sixteen TUI components, copy-paste, no dependency The Boring Reliability Layer Every Autonomous Agent Needs Nven - Secret manager Building Multi-Tenant Row-Level Security in PostgreSQL: A Production Pattern Building Vylo — Looking for Collaborators, Partners & Early Support I Thought Memory Fades With Time. It Actually Fades With Information. ORA-00064 오류 원인과 해결 방법 완벽 가이드 I registered an AI agent at 1 AM and something cracked open in my head Pitch: Nven - Sync secrets. Ship faster. Why y=mx+b is the heart of AI From Routines to a Crew — Building a System That Plans Its Own Work & executes it 25 React Interview Questions 2026 (With Answers) — Hooks, React 19, Concurrent Mode An open source LLM eval tool with two independent quality signals Using Dashboard Filtering to Get Customer Usage in Seconds from TBs of Data Skills, Java 17, And Theme Accents 4 Hard Lessons on Optimizing AI Coding Agents Arctype: Cross-Platform Database GUI for LLM Artifacts Your robots.txt says GPTBot is welcome. Your server says 403. Organizing How to Use AWS Glue Workflow 5 n8n Automations Every Digital Agency Should Be Running (Bill More, Work Less) Getting Started with TorchGeo — Remote Sensing with PyTorch Designing a Scalable Cross-Platform Appium Framework Google Antigravity 2.0 & Slash Commands Building a Unified Adaptive Learning Intelligence with Gemma 4, Flutter, and Multi-Model Orchestration Looking for beta testers for a £60 server management application The Disk-Pressure Incident That Taught Me to Always Set LimitRanges and Other Lessons from Mirroring EKS Locally. Why AI Should Not Write SQL Against ERP Databases Vibe coding works until it doesn't. The debt is real. Shipping at the Edge: Migrating a Coffee Subscription Platform to Cloudflare Workers Stop Tab-Switching: A Developer's Guide to Color Tools That Actually Fit the Workflow DevOps vs MLOps vs AIOps: What Changes, What Stays, and a Simple Roadmap to Get Started Run Powerful AI Coding Locally on a Normal Laptop 5 n8n Automations Every WooCommerce Store Needs (Save 10+ Hours/Week) What I Learned Building My Own AI Harness Hytale Servers Will Fail Treasure Hunts Until We Fix Our Event Handling Redux in React: Managing Global State Like a Pro Unfreezing Your GitHub Actions: Troubleshooting Stuck Deployments and Protecting Your Git Repo Statistics Unlocking Project Discoverability on GHES: A Key to Software Engineering Productivity When the Cleanup Code Becomes the Project Rockpack 8.0 - A React Scaffolder Built for the Age of AI-Assisted Development Mismanaging the Treasure Hunt Engine in Hytale Servers Will Get You Killed Why Hardcoded Automations Fail AI Agents Stop Calling It an AI Assistant. It’s Already Managing Your Company Why I built a post-quantum signing API (and why JWT is on borrowed time) Weekend Thought: Frontend Build Tools Suffer From Work Amnesia AI Is Changing Engineering Culture More Than We Realize A 10-Line Playwright Trick That Saved Me Hours on Every Sephora Run Everyone Was Focused on Gemini, But Infinite Scaler Was the Real Twister "Gemma 4 Analyzed My Bank Statements – Apparently I 'Have a Problem' with Coffee and Late-Night Apps" #css #webdev #beginners #codenewbie The Hidden Layer Every AI Developer Must Learn AlphaEvolve: Google DeepMind's Gemini-Powered Evolutionary Coding Agent RDS Reserved Instance Pricing: Every Engine, Every Rule, Real Dollar Savings How To Build An AI-Powered MVP Without Burning Your Startup Budget In 2026 Reading a Psychrometric Chart Without Getting Lost LMR-BENCH: Can LLM Agents Reproduce NLP Research Code? (EMNLP 2025) How to turn text into colors (without AI) Building Real-Time Apps in Node.js with Rivalis: WebSockets, Rooms, Actors, and a Binary Wire This Week In React #282 : Security, Fate, TanStack, Redux, Jotai | Hermes-node, Expo, Rozenite, Harness | TC39, Bun, pnpm, npm, Yarn, Node AI Copilot vs AI Agent Architecture - What's Actually Different (And Why It Matters) Smart Contract Security: NEAR's Futures Surge and AI Token Risks Database Maintenance: Tracing Production Incidents to Their Root Cause Stop juggling AI SDKs in PHP — meet Prisma Google Quietly Changed What “Apps” Mean at I/O 2026 The Infrastructure Team Is the Real Single Point of Failure Building SQLite from Scratch: 740 Lines of C++23 to Understand Every Byte of a .db File The 4 Levels of Hermes Agent Scaling Framework: From One Hermes Agent to a Fully Automated Team Your AI Has a Memory. It Just Doesn’t Know What to Remember. Claprec: Engineering Tradeoffs - Limited time vs. Perfection (6/6) Building a Daily Google News API Monitor in Python Building RookDuel Avikal: From Chess Steganography to Post-Quantum Archival Security Google I/O e IA: o que realmente muda na vida do dev? Color Contrast Failures: The Number One Accessibility Issue and How to Fix It # I Watched 15 Hours of Hermes Agent Videos So You Don't Have To Cómo solucionar el bucle infinito en useEffect con objetos y arrays en React The First Agent-Centric Cloud Security Platform — And Why We Didn't Build It That Way On Purpose Most Treasure Hunts Engines on Hytale Servers Are Built to Fail - Lessons from a Burned Database GhostScan v3.0 — From Closed-Source EXE to Open-Source Pentest Framework De hojas de cálculo a IA: construyendo una plataforma SRM moderna When is AI fine in education? Python Tools for Managing API Rate Limits in Data Pipelines How to Implement Exponential Backoff for Rate-Limited APIs in Python "My Web Chat Wasn't a Real Channel. That Broke My Agent Pipeline" next-advanced-sitemap v1.0.7 — safer URL ingestion & automatic trimming for Next.js sitemap generation I keep seeing people build an AI lead processing agent when they really need a 6-step rules engine AI Powered Student Learning Assistant Using Gemma 4 How I Built a Drop-In Proxy to Slash My OpenAI Bills by 20%+ Automatically Building a Sarcastic AI English Tutor with Persona-as-Code and Gemini Audio Input for Pronunciation Correction Five Years Later, I Finally Have 96GB VRAM — What It Actually Unlocks for Agent Loops Turning a 1-Line Idea Into a 40-Second Short with a 10-Beat Local Video Pipeline Running LTX-2.3 Alongside TTS on a Single 96GB GPU with a Cold-Start Architecture Cutting LTX-2 22B Peak VRAM by 40% with fp8_cast — and Why optimum-quanto Was a Trap HiDream Skeleton Mode: Prompt Beats OpenPose Ref — 8 Patterns Benchmarked Replicating a Language-Learning Comedy Short with Claude Code — Gemini as a Multimodal Sub-Agent HiDream-O1-Image 3–8x Faster: Benchmarking Steps, CFG, and Resolution AWS Savings Plan Buying Strategy: How to Layer, Size, and Time Commitments application.properties I built a macro tracker powered by AI + attitude Solace: A Global Mental Health First Responder Built with Gemma 4 Why Blocking Prompt Injection Is Wrong — and What to Do Instead
Open Source Email Server Setup: The 2026 Infrastructure Guide
Dhiraj Chatp · 2026-05-18 · via DEV Community

The Definitive Guide to Self-Hosted Email Infrastructure in 2026

Why would anyone self-host email in 2026? AWS SES, SendGrid, Mailgun, and Postmark exist. They're cheap, reliable, and require zero maintenance.

And yet — serious senders are moving back to self-hosted. Here's why, and how to do it right.


The Hidden Cost of Cloud Email Services

Cloud SMTP services charge by the email, not by the infrastructure. For transactional email at scale, this adds up fast:

Provider Volume Monthly Cost
SendGrid 100K emails ~$89
SendGrid 1M emails ~$499
Mailgun 50K emails ~$50
AWS SES 1M emails ~$100

But the real cost isn't the per-email fee. It's the 30-70% revenue markup on your email program when you hit serious volume. A sender doing 10M/month emails pays $500-1000 on SES vs $2500-5000 on SendGrid.

More importantly: you don't own your infrastructure. When AWS has an SES outage (it happens), your transactional emails stop. When SendGrid gets flagged by Gmail (it happens), you have no control over remediation.


Why Open Source MTAs Are Having a Moment

The open source MTA landscape has matured dramatically:

KumoMTA — The modern successor to PowerMTA. Built by the team that created PowerMTA. Written in Rust for performance and memory safety. Full commercial support available. Handles 10M+ messages/hour on commodity hardware.

Postfix — The de facto standard for Linux mail servers. Ubiquitous, rock-stable, well-documented. Best as a mail transfer agent (receiving/proxy) rather than a high-volume sender.

Exim — Flexible and powerful, but increasingly showing its age. Still popular in UK hosting environments.

Haraka — High-performance SMTP server written in Node.js. Excellent plugin architecture. Scales well but complex to operate at very high volume.


KumoMTA vs Postfix: When to Use Each

Use KumoMTA when:

  • You're sending transactional email at scale (100K+/day)
  • You need granular bounce handling and routing logic
  • You want detailed per-message logging and analytics
  • You need commercial support with SLA guarantees

Use Postfix when:

  • You're handling inbound mail routing
  • You need a mail relay/proxy in front of a cloud service
  • Simplicity and ubiquity matter more than raw performance
  • You're already running Postfix and just need basic relay

Hardware Requirements for Self-Hosted Email

One of the biggest misconceptions: you need expensive hardware. You don't.

KumoMTA benchmarks on commodity cloud hardware:

Instance vCPUs RAM Emails/Hour
AWS t3.medium 2 4GB ~500K
AWS t3.large 2 8GB ~1.2M
AWS c5.xlarge 4 8GB ~3M
AWS c5.2xlarge 8 16GB ~8M

For most applications, a single t3.large ($60/month) handles 1-2M emails/day comfortably.

Critical: Email deliverability is IP-based. Separate your transactional email infrastructure from your web servers. Never send from the same IPs that run your web application.


Network Architecture for Self-Hosted Email

[Application Servers]
       ↓ SMTP
[KumoMTA - Outbound MTA] ← Your IP reputation lives here
       ↓
[接收服务器 - Gmail, Outlook, etc.]

Enter fullscreen mode Exit fullscreen mode

Key architectural decisions:

Dedicated IPs: Use 1 IP per 50K-100K daily volume. Mix warm IPs with cold ones so a new IP warming doesn't affect your main traffic.

InboundMX servers: Separate servers to receive bounces, FBL notifications, and inbound mail. Don't mix inbound and outbound on the same infrastructure.

Analytics relay: A light SMTP relay that copies headers to your logging system before forwarding. Useful for debugging delivery issues without slowing down main send path.


DNS Configuration: Your Sender Identity

This is where most teams fail. Your DNS is your sender identity. Configure it before you send a single email.

The Authentication Trinity

SPF: Authorize your sending servers:

v=spf1 include:_spf.postmta.com include:_spf.google.com ~all

Enter fullscreen mode Exit fullscreen mode

DKIM: Sign every message with your private key:

selector._domainkey.postmta.com IN TXT (
  "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA..."
)

Enter fullscreen mode Exit fullscreen mode

DMARC: Tie it together and get reports:

_dmarc.postmta.com IN TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc@postmta.com; pct=100"

Enter fullscreen mode Exit fullscreen mode

Reverse DNS (PTR Records)

Your sending IP must resolve to your domain. Check:

$ host 162.222.226.207
207.226.222.162.in-addr.arpa domain pointer postmta.com.

Enter fullscreen mode Exit fullscreen mode

If PTR doesn't match your HELO hostname, Gmail and Microsoft will start rejecting your mail.

MX and SPF for Bounce/Feedback Domains

Use separate domains for bounce handling:

  • Return-Path: via bounce.postmta.com
  • SPF: v=spf1 include:_spf.postmta.com ~all
  • DMARC on postmta.com, separate DMARC on bounce.postmta.com

This lets you track bounce rates by domain and isolate reputation problems.


Setting Up KumoMTA: Step by Step

# Install on Ubuntu 22.04
curl -L https://github.com/KumoCorp/kumomta/releases/latest/download/kumomta_latest_amd64.deb -o kumomta.deb
sudo dpkg -i kumomta.deb

# Configure
sudo nano /etc/kumomta/kumomta.conf

Enter fullscreen mode Exit fullscreen mode

Basic sending configuration:

# /etc/kumomta/kumomta.conf

# Outbound queue settings
remote_queue "outbound" {
  concurrency = 500
  rate = "10000/hour"  # Adjust for IP warming stage
}

# DKIM signing
dkim {
  sign = true
  selector = "mail"
  domain = "postmta.com"
  private_key = "/etc/kumomta/dkim/mail.private"
}

# Bounce handling
bounce {
  use_8bitmime = false
  log_bounces = true
  log_path = "/var/log/kumomta/bounces.log"
}

Enter fullscreen mode Exit fullscreen mode

Send your first test:

echo "From: postmaster@postmta.com
To: test@gmail.com
Subject: Test

Test message body" | /usr/bin/kumomta-send \
  --server 127.0.0.1:25 \
  --from postmaster@postmta.com \
  --to test@gmail.com

Enter fullscreen mode Exit fullscreen mode


IP Warming: The Right Way

New sending IPs take 4-6 weeks to build reputation. Rushing this is the most common mistake.

Week 1: 100 emails/day to your most engaged recipients only
Week 2: 500 emails/day, expand to broader list
Week 3: 2,000 emails/day
Week 4: 10,000 emails/day
Week 5: 50,000 emails/day
Week 6: Full volume

Monitor daily: If bounce rate exceeds 1%, reduce volume and investigate before continuing.


Monitoring Your Self-Hosted Email Infrastructure

Track these metrics daily:

Delivery Metrics:

  • Bounce rate (target: < 1% hard, < 3% soft)
  • Complaint rate (target: < 0.1%)
  • IP reputation score (target: 90+ on Sender Score)
  • Gmail Postmaster Tools: delivery errors, spam rate

Infrastructure Metrics:

  • Queue depth (target: < 1000 messages)
  • Delivery latency (target: < 30 seconds for transactional)
  • Connection errors
  • Disk I/O on mail server

Tools:

  • Google Postmaster Tools (free, Gmail reputation)
  • Microsoft SNDS (free, Outlook reputation)
  • Sender Score by Validity (free, overall IP score)
  • MXToolbox Blacklist Check (free, blacklist status)

Is Self-Hosted Right for You?

Yes, if:

  • You're sending 500K+ emails/month
  • You want to own your sender reputation
  • You have engineering capacity to maintain infrastructure
  • Cost savings at scale matter to your business

Stick with cloud services if:

  • You're under 100K emails/month
  • You have no infrastructure engineering capacity
  • You need SLA guarantees and 24/7 support
  • Your sending patterns are highly irregular

Next Steps

Ready to explore self-hosted? Start with our KumoMTA Setup Guide and IP Warmup Best Practices.