Skip to content
OS Domains
Infrastructure · Bare metal MTA

Email sending servers, the way the people who actually run them would build them

An email sending server is a dedicated machine running a mail transfer agent (MTA) — PowerMTA, KumoMTA or Postfix — that queues and delivers your outbound mail at volume, with the IP reputation, authentication and throttling that high-volume sending needs. OS Domains builds these across seven EU, US and Panama datacenters, managed end-to-end or self-managed with us as the platform, for senders who have outgrown a shared API or relay and want to control the MTA itself.

KumoMTA, PowerMTA and MailerQ on bare metal across seven datacenter PoPs. Managed end-to-end by engineers who have been operating MTA infrastructure since 2008, or self-managed with the MTA pre-installed and tuned for your traffic profile. No cloud wrappers, no Amazon SES underneath, no licensing surprises. From €349 per month for a single self-managed node, up to multi-region HA clusters for senders past 50 million a month.

In short

  • Your choice of MTA — PowerMTA, KumoMTA or Postfix — matched to volume, budget and how much tuning you want to own.
  • Managed end-to-end, or self-managed with us as the platform: you decide where the operational line sits.
  • Seven datacenter PoPs across the EU, US and Panama, so you choose both the jurisdiction and the peering distance to receivers.
  • Five plans, fixed monthly euros from €349 (Single Node) and €699 (HA Pair), with managed plans and clusters above; dedicated IPs warmed on a managed ramp.
  • Migration from PowerMTA on AWS or another colocation in two to four weeks, with reputation carried across.
On the node

What runs on a dedicated sending server?

A sending node is a stack: your app hands mail to the MTA, which signs and shapes it and hands it to a dedicated IP with reverse DNS set, under SPF, DKIM and DMARC, on a hardened bare-metal box in the PoP you chose. On a managed plan we operate every layer; self-managed, you own the MTA and we run the platform beneath it. Where you draw that line usually comes down to one question: whether you already have an MTA operations team you want to keep busy, or whether you would rather hand the pager to people who run these systems every day. The diagram shows the layers.

Your app / API submits mail MTA: PowerMTA · KumoMTA · Postfix queue · DKIM signing · traffic shaping Dedicated IP pool · reverse DNS SPF · DKIM · DMARC authentication Hardened bare-metal node EU / US / Panama PoP Managed: we operate every layer. Self-managed: you own the MTA, we run the platform.

On the box itself, the MTA is a running service with a live queue, and the sending IP has its reverse DNS set — the basics a receiver checks first:

$ systemctl is-active kumomta
active
$ kcli queue-summary
domain             queued    delivered/min
gmail.com               0          1,240
microsoft.com          12            880
$ dig +short -x 203.0.113.45
mail.yourdomain.com.
Why dedicated MTA infrastructure

There is a volume curve where renting a SaaS API stops making sense and you need to own the MTA

Cloud-based email APIs make a lot of sense up to a point. They handle the operational complexity for you, the per-email pricing scales linearly with use, and you can plug in an SDK in fifteen minutes and forget about the rest. We sell that product too. It works well for the senders it works well for. Most teams should never run their own MTA, and we will tell you that on a discovery call if your volume profile fits the API model better.

But there is a curve. Past a certain volume threshold, usually somewhere between five and ten million messages a month for a single sender or two to five million per tenant in a multi-tenant ESP, the API model starts to feel expensive in two specific ways. The per-email cost compounds into a five-figure monthly invoice that is hard to defend to procurement. And the operational abstractions that the API provides start working against you, because you cannot tune queue behavior, retry policy, or per-receiver throttling the way you would if you owned the MTA layer. The first problem is solvable with a discount or an Enterprise contract. The second is structural. APIs hide the MTA from you on purpose.

For senders past that curve, owning the MTA layer becomes the right answer. You buy or license a real MTA. You provision bare metal. You assign and warm IPs. You configure VirtualMTAs or KumoMTA Lua hooks or MailerQ queue topology. You write your own monitoring around it. You get full control over how mail flows from your application to the recipient mailbox. The trade is operational complexity, but for the sender at scale, the complexity is justified by the cost savings, the deliverability tuning, and the fact that nothing about your sending behavior is at the mercy of an API provider's architecture decisions.

The catch is that almost nobody wants to actually do all of that. Procurement bare metal at a colocation provider, install Linux, install PowerMTA or KumoMTA, configure the queues, set up monitoring, build the bounce handling, train someone on staff to be the MTA operator. That is a six-month project for a team that did not have one before, and the team that does have one is usually busy with their existing infrastructure. The honest answer for most senders past the curve is that they want the MTA layer to behave like infrastructure they own, but they want somebody else to operate it.

That is what this page is about. We provision the bare metal, we install and configure the MTA you choose, we hand you the credentials, and we run the operational layer behind it — or you run it yourself if you have the team. Either way, the MTA is on a single-tenant box that is yours for the contract period, the IP space is yours, the reputation is yours, and we are the people who tune the queues when something behaves oddly. Not a first-line support team in a different timezone. The actual engineers.

And we are operators of all three of the MTAs that matter for high-volume sending. PowerMTA on a 5.x license for customers whose procurement requires commercial. KumoMTA on Rust for new builds where the licensing tax is not justified. MailerQ for stacks already heavy on RabbitMQ that benefit from the queue-first architecture. We have been running PowerMTA in production since 2009, KumoMTA since the public beta in 2023, MailerQ for around four years for the customers who need it. The fact that we are not vendor-locked into one MTA means the recommendation we give you is honest, because we benefit either way.

Pick the MTA, then we configure it

Which MTA should you run — PowerMTA, KumoMTA or Postfix?

The right MTA depends on the shape of your sending, not the marketing: PowerMTA for the highest-volume commercial operations, KumoMTA for modern config-as-code at scale, Postfix when volume is modest and you want zero licensing. A common mistake when choosing an MTA is letting the marketing decide for you. Each of the three has scenarios where it is the obvious answer and scenarios where it is overkill. Below is the framework we use during discovery calls. There is no "best" — there is the right tool for the operational shape of your sending.

KumoMTA

Default

The default for new builds in 2026

KumoMTA is open-source Apache 2, written in Rust, designed by people who built Momentum and PowerMTA in earlier lives. The performance is excellent, the configuration model uses Lua hooks rather than static files, and there is no licensing tax. We run it for the majority of new customers because it solves the same problem PowerMTA solves without the eight-thousand-dollar annual line item. The official EU support partner is Postmastery, which we work with directly when complex problems need vendor escalation.

Best for

Modern stacks, no commercial license requirement, teams comfortable with Lua configuration, anyone migrating off the PowerMTA licensing tax.

Not for

Procurement processes that require a vendor with a commercial support contract on the MTA software itself. Stacks deeply tied to PowerMTA-specific config syntax that would need full rewrite.

Throughput: 4-7 million messages per hour per server on properly sized hardware
License: Open-source, Apache 2

PowerMTA

For procurement that demands a commercial vendor

PowerMTA remains the industry standard for ESPs that have been running it for over a decade. PowerMTA 5.x with Bird Signals integration is what most procurement teams want to see. Licensing starts at $8,000 per year for the smallest commercial tier and scales by volume. We resell the license and bundle it into our managed plans, so you get one EUR-denominated invoice instead of two contracts to manage. We have been operating PowerMTA in production since the SparkPost acquisition era, which is now Bird ownership, which has been a slightly bumpy road for the product but the MTA itself remains rock solid.

Best for

Regulated industries where the auditor needs a vendor name on the MTA. Stacks with twenty years of PowerMTA-specific operational knowledge and config patterns. Customers who already have a PowerMTA contract through us or directly with Bird (formerly SparkPost).

Not for

New builds where licensing cost is a primary concern. Teams that have never operated PowerMTA before — KumoMTA is easier to start with.

Throughput: 7-9 million messages per hour per server on properly sized hardware
License: Commercial, ~$8K/year minimum (priced into our managed plans)

MailerQ

Queue-first architecture for RabbitMQ-heavy stacks

MailerQ is built around external message queues — typically RabbitMQ — rather than internal queue files. Your application writes messages to a RabbitMQ exchange, MailerQ pulls from it, makes routing and delivery decisions, and sends. The architecture is excellent for stacks that already have AMQP infrastructure, where the email send is just one consumer of an event stream that drives many other behaviors. MailerQ was also the first MTA to support ARC (Authenticated Received Chain), which matters for forwarders and mailing-list-style use cases.

Best for

ESPs already running RabbitMQ as their primary message bus. Use cases where messages are produced asynchronously by many services and need queue-driven delivery scheduling. Customers who value MailerQ's ARC-first authentication support.

Not for

Greenfield builds without an existing AMQP investment. Smaller deployments where the additional operational complexity of running RabbitMQ + MailerQ exceeds the benefit.

Throughput: 3-5 million messages per hour per server, more with horizontal scaling
License: Commercial, on-prem license, contact for pricing
Two ways to consume this product

Managed end-to-end, or self-managed with us as the platform

Customers fall into two clear groups. The first wants the MTA layer treated as infrastructure-as-a-service: we own the operational responsibility, you consume the SMTP endpoint and pay a monthly fee. The second wants ownership of the MTA configuration and operations themselves, and just needs the bare metal, the MTA license, the IP space, and the kind of dedicated infrastructure they cannot get from cloud SaaS. We sell both lanes side by side, and the pricing reflects who does what.

Lane 1

Managed MTA

You consume an SMTP endpoint. We handle the rest.

The full operational stack is on us. We provision the bare metal, install the MTA you chose during discovery, configure VirtualMTAs or Lua hooks for your sending profile, set up DKIM signing, configure per-receiver throttling profiles, set up bounce handling, monitor reputation, respond to incidents, apply patches, manage IP warming, and rotate DKIM selectors on schedule. You authenticate to an SMTP endpoint with credentials we provide. Your application code does not change beyond pointing at the new endpoint. This is the right choice for senders who want full MTA-level control of their sending behavior without staffing an MTA operations team.

Ideal for

Senders past 5M/month, multi-tenant ESPs, agencies serving 50+ clients, regulated industries that need formal SLA on the MTA layer.

From €799 / month

Lane 2

Self-managed bare metal

You get the box, the license, the IP space. Operations are yours.

Same hardware, same MTA software, same datacenter PoPs, same IP allocation strategy. Difference: you have root, you tune the configuration, you respond to your own incidents, you handle the IP warming yourself or you contract our IP warming service separately. We provide the initial install and a documented baseline configuration tuned to your stated volume profile, plus 30 days of post-install support to fix anything that surfaces. After that you own it. This is the right choice for teams with existing MTA operational expertise who want dedicated infrastructure at a lower price point than fully managed.

Ideal for

Teams with in-house deliverability engineers. Existing PowerMTA operators migrating off self-hosted infrastructure to a colocation model. Customers who want full root and config control.

From €349 / month

Hardware specifications

What is actually in the rack

The hardware is where most "MTA hosting" providers cut corners and most customers do not notice until something breaks under load. Below is what we actually deploy, by tier, with no asterisks. All servers are single-tenant — no virtualization, no shared CPU, no neighbor VMs. ECC RAM throughout, NVMe storage, redundant power. If you want a different config, we build to spec.

T1

Performance

Single-server deployments for senders up to 20M/month

  • CPU Intel Xeon Silver 4314 (16 cores / 32 threads) or AMD EPYC 7313P (16 cores / 32 threads)
  • RAM 64 GB DDR4 ECC
  • Storage 2x 1.92 TB NVMe in RAID 1, hot-swappable
  • Network 2x 10 Gbps redundant uplinks
  • IPs /29 dedicated block (5 usable IPs), audited pre-assignment
  • Location Choice of any of our 7 PoPs
T2

High-throughput

For senders past 20M/month, or ESP infrastructure backbones

  • CPU Intel Xeon Gold 6342 (24 cores / 48 threads) or AMD EPYC 7443 (24 cores / 48 threads)
  • RAM 128 GB DDR4 ECC
  • Storage 4x 3.84 TB NVMe in RAID 10, hot-swappable
  • Network 4x 10 Gbps with active-active LACP, BGP-capable
  • IPs /28 dedicated block (13 usable IPs), audited pre-assignment
  • Location Multi-region available (primary + DR)
T3

Cluster

Multi-node deployments for senders past 50M/month or ESPs serving 100+ tenants

  • CPU 3+ nodes, each Xeon Gold or EPYC class
  • RAM 128-256 GB per node
  • Storage NVMe with cluster-aware RAID, shared storage option (NFS/Ceph) for KumoMTA
  • Network 4x 10 Gbps per node, full BGP peering, anycast on request
  • IPs /27 or /26 across multiple geographies, multi-region IP warming managed
  • Location Vienna primary, Frankfurt and Strasbourg secondary, with optional US (Dallas) and Panama edge
Where the boxes live

Where are the sending servers located?

The seven PoPs sit across the EU, the US and Panama. Datacenter location matters for two reasons that the procurement page rarely explains clearly. First, jurisdiction — where the box physically sits determines whose laws apply to the data on it. Second, peering — the network distance from your sending IP to the receiving mailbox provider affects accept/reject behavior, especially with European receivers who scrutinize geographic origin. Below are the seven locations we offer, with the relevant facts for each.

Vienna

HQ

Austria · Tier 3+

Default for EU customers. Best peering with Nordic and Baltic mailbox providers. Sub-processor of choice for Schrems II compliance.

Frankfurt

Germany · Tier 4

Excellent peering with central European receivers (Strato, GMX, T-Online, Web.de). Default for German market customers.

Amsterdam

Netherlands · Tier 3+

Strong reputation with Dutch and Belgian receivers, low latency to UK.

London

United Kingdom · Tier 4

For UK senders post-Brexit who need UK-jurisdiction hosting.

Strasbourg

France · Tier 3+

French market specialists, good peering with Free.fr, Orange, La Poste. France-data-only customers.

Dallas

USA · Tier 3+

For senders who need US-origin IPs to optimize delivery to American consumer mailboxes (Gmail US, Outlook.com US). Out of EU jurisdiction.

Panama

Panama · Tier 3+

Workloads with specific jurisdiction requirements outside EU and US. Latin American markets, hosting under predictable due-process workflow.

Pricing across the two service lanes

How much does an email sending server cost?

Plans start at €349/mo (Single Node, self-managed) and €699 (HA Pair), with managed plans and larger clusters above. Pricing reflects the lane. Self-managed plans cover the bare metal, the MTA license (where applicable), and the IP allocation. Managed plans add the operational layer: configuration, monitoring, incident response, IP warming, ongoing tuning. Choose based on whether you have an MTA operations team in place. Annual contracts save 15%.

Self-managed

You operate it. Lower price point. Full root.

Single Node

One bare-metal node with the MTA pre-installed. You operate it.

€349 / month

Live in 24 to 48 hours

Ideal for

Existing MTA operators wanting dedicated EU bare metal, agencies graduating from VPS-based PowerMTA setups, technical solo operators.

  • Performance-tier hardware (16-core, 64GB ECC, NVMe RAID)
  • Choice of KumoMTA, PowerMTA 5.x or MailerQ pre-installed
  • Initial baseline configuration tuned to your volume profile
  • 30 days of post-install support
  • /29 IP block (5 dedicated IPs, pre-audited)
  • Custom rDNS / PTR records for every IP
  • Choice of any of our 7 PoPs
  • KVM-over-IP for emergency access
  • Full root, no managed-service constraints
Order Single Node

HA Pair

Two nodes for active-passive failover or active-active load distribution.

€699 / month

Live in 48 to 72 hours

Ideal for

Senders who need redundancy without going to full cluster pricing, ESPs handling business-critical transactional traffic, regulated industries with HA requirements.

  • 2x Performance-tier nodes
  • Same MTA on both, configured for active-passive or active-active
  • Floating IP / VIP between the pair
  • Initial config and 30 days of HA setup support
  • /28 IP block (13 dedicated IPs)
  • Optional cross-PoP setup (one Vienna, one Frankfurt, etc.)
  • KVM-over-IP on both nodes
  • Full root
Order HA Pair
Managed

We operate it. SMTP endpoint to consume. Higher price, zero ops on your side.

Managed Starter

Single-server managed MTA. We operate it, you consume an SMTP endpoint.

€799 / month

Live in 5 to 7 business days

Ideal for

Senders 5-15M/month who want MTA-layer control without operating it. Mid-market ESPs.

  • Performance-tier hardware, dedicated to you
  • KumoMTA, PowerMTA 5.x or MailerQ — your choice, our license
  • Full configuration and ongoing tuning
  • IP warming managed by us
  • Bounce handling and feedback loop integration
  • DKIM rotation on 12-month schedule
  • Reputation monitoring across 6 blacklists + Postmaster Tools + SNDS
  • Patch management and OS updates
  • 8h business response SLA on tickets
  • Monthly performance review
Book Managed Starter
Most chosen

Managed Pro

High-throughput managed MTA. The tier most ESPs and agencies land on.

€1,499 / month

Live in 5 to 10 business days

Ideal for

Senders 15-50M/month, multi-tenant ESPs, agencies serving 100+ clients, regulated industries.

  • High-throughput tier hardware (24-core, 128GB ECC)
  • Everything in Managed Starter
  • Sub-account / VirtualMTA isolation per tenant
  • Custom queue prioritization per traffic class
  • /28 IP block (13 IPs) with pool tiering
  • Cross-PoP DR option (failover ready)
  • 4h business response SLA
  • Dedicated account engineer in shared Slack
  • Quarterly review with senior engineer
Book Managed Pro

Cluster

Multi-region, multi-node clusters with signed SLA and 24/7 incident response.

Custom annual

Onboarding 15 to 30 business days

Ideal for

Senders past 50M/month, ESPs with hundreds of tenants, large enterprise senders with multi-region requirements.

  • 3+ node cluster across EU primary + DR regions
  • Cluster-aware MTA configuration (KumoMTA shared storage, PowerMTA cluster, MailerQ multi-instance)
  • /27 or /26 IP allocation across geographies
  • Multi-region IP warming and reputation pooling
  • Custom log retention up to 7 years
  • Signed SLA with service credits
  • Named technical account manager
  • 1-hour incident response SLA, 24/7
  • Slack Connect direct line to operations
  • Custom contractual structures (sub-DPAs, white-label legal)
Talk to sales

PowerMTA license cost is included in Managed plans (we hold the license). For Self-managed plans, the PowerMTA license can be billed at cost as passthrough (€650-€700/month equivalent at our resale rate) if you want PowerMTA specifically. KumoMTA has no license cost. MailerQ license is quoted per case. Bandwidth is included up to 50 TB/month per node, billed at €0.02/GB above. Annual prepay saves 15%.

How operations actually work

Six things we do that the colocation-only providers do not

Most "PowerMTA hosting" providers are colocation companies that learned to install PowerMTA. The hosting is fine. The MTA expertise is not. Here is what is different about how we run the operational layer for managed customers, in plain English.

Pre-assignment IP audit on every dedicated IP

Before any IP gets assigned to a customer, it gets checked against six blacklists in the 24 hours before assignment: Spamhaus SBL, Spamhaus PBL, Spamcop, Barracuda Reputation, SORBS and UCEPROTECT. If anything turns up, the IP goes back into rotation and we pick the next one. Your onboarding email includes the audit timestamp. This is documented evidence in case you ever need to show it to a customer or auditor.

IP warming managed on a published curve

New dedicated IPs get warmed on a 14 to 28 day curve depending on your volume profile. We monitor Postmaster Tools, SNDS and Sender Score throughout. The curve adjusts dynamically based on observed reputation. If reputation softens at any stage, we hold the volume increase until it stabilizes. The dashboard shows daily progress. For senders coming from a clean, warmed dedicated IP at another provider, we can sometimes skip warming on Pro and Cluster tiers — we evaluate the existing reputation and decide on a case basis.

The engineer who configures the queue is the engineer who answers your ticket

No first-line tier. When you open a ticket on a managed plan, the response comes from someone who has logged into the box, edited the config, and knows what every parameter does. Average first-response time on managed tickets in 2025 was 22 minutes during business hours. We use this in copy because it differentiates us, but it is also operationally why managed-tier MTTR for incidents has been under 18 minutes for the last 12 months.

DKIM rotation on a 12-month schedule, automated

DKIM keys get stale. Best practice is rotating them every 12 to 18 months, but most operators forget because it is a calendar item nobody owns. We track every active selector and rotate on a 12-month cadence: publish the new public key in DNS, configure the MTA to start signing with the new private key in parallel, wait 7 days for caches to refresh, then remove the old selector. The whole process is automated and the customer is informed before, during and after. No surprise breakage.

Reputation monitoring across all the providers that matter

Daily reputation pulls from Google Postmaster Tools, Microsoft SNDS, Validity Sender Score, Talos Intelligence, and the 50+ blacklists we track per IP. The dashboard shows reputation curves over time, trend lines, and inflection points correlated with sending behavior. When something changes direction, you get an alert in Slack or email within an hour. This is the difference between knowing your reputation dropped and knowing why it dropped.

OS-level patching and security on a documented schedule

Linux kernel updates, MTA version upgrades, security patches. Critical security patches applied within 48 hours of vendor release. Routine maintenance windows on Sunday nights with 7 days of notice and confirmation. Nothing rolled out without testing in a staging environment first. Maintenance log published per customer so you have audit evidence. We have not had an unplanned outage from a patch in three years and we are not going to start now.

Migration from another provider

From PowerMTA on AWS or another colocation in two to four weeks

Most senders considering us are migrating from somewhere. PowerMTA on EC2 with reputation getting eroded by AWS IP block neighbors. KumoMTA self-installed on a Hetzner box with no operational team. Or another "managed PowerMTA" provider whose support quality has slipped. Below is the realistic migration playbook.

  1. Week 1

    Discovery, audit, target architecture

    A 60-minute architecture review. We look at your current setup: MTA version and config, IP block, sending volume profile, customer model (single-tenant or multi-tenant), receiver mix, current pain points. We propose target architecture (which lane, which tier, which PoP, single-node or HA, IP allocation strategy) and produce a migration runbook. NDA signed at this point. Costs nothing to do this; we charge starting from day of provisioning.

  2. Week 2

    Provisioning, parallel run

    Hardware provisioned, MTA installed, baseline config from your existing setup translated into the new MTA where applicable. IPs allocated and pre-audited. You authenticate to the new endpoint and start sending a small percentage of traffic in parallel with the old provider. We watch the metrics, you watch the metrics, both sides confirm the new setup is behaving correctly under your real workload.

  3. Week 3

    Ramp-up, IP warming if needed

    Traffic ramps from 5% to 25% to 50% to 100% over the week. New dedicated IPs warm on the published curve. Old provider stays at 50% during the middle of the week as rollback insurance. We do daily syncs (15 minutes) during this week with both engineering teams to catch anything anomalous fast.

  4. Week 4

    Cutover and old-provider sunset

    Full traffic on new infrastructure. Old provider drops to standby for 14 days as final rollback option. After the standby window, you cancel the old contract and stop paying twice. We capture the migration in a written debrief with metrics: throughput delta, latency delta, deliverability delta. Most customers see a small but measurable deliverability improvement post-migration because the IP audit pre-assignment catches problems the old provider was tolerating.

Real questions from CTOs and infrastructure leads

What technical buyers ask before they sign

Why would we host MTA infrastructure with you instead of running it ourselves on AWS or Hetzner?

For some teams, the answer is you would not. If you have an MTA operations team and you have already built the operational tooling around your stack, running on AWS or Hetzner is fine. Where we win is the IP space — AWS and most cloud providers do not give you clean dedicated IPs that have not been used for marketing email by the previous tenant, and the reputation cost of starting from a polluted block is significant. Hetzner is better than AWS for sending IPs but the IPs still come without history validation, and Hetzner has had blacklist issues with their networks at times. Our IPs are vetted before you get them, our network operates over 100,000 IPs across multiple allocations and has never had a single block listed on Spamhaus, and the operational team we run on top is the differentiator. Whether the math works depends on your volume and your team. We will tell you on a discovery call.

How do you handle PowerMTA licensing?

For Managed plans, the PowerMTA license is included in your monthly fee — we hold the license, you consume the MTA. For Self-managed plans where you specifically want PowerMTA, the license is billed as passthrough at our resale rate (around €650-€700/month equivalent for the smallest commercial tier), in addition to the bare metal cost. Or you bring your own license if you already have one with Bird. Most customers on Self-managed end up choosing KumoMTA because the license tax is the main reason to consider migration in the first place.

Can we run our existing PowerMTA configuration on your hardware?

Yes. We will translate your existing PowerMTA config to our hardware during the migration phase. PowerMTA configs are portable as long as the version matches — bring us your current pmta.conf, your domain.conf, your virtual MTA definitions, and we set them up identically. The IP-specific bindings update automatically to the new IPs we allocate. For PowerMTA-to-KumoMTA migrations, we do a config translation that maps PowerMTA concepts to Lua hook equivalents — it is not 1:1 because the architectures differ, but the operational behavior maps cleanly.

What is your stance on running your own application code on the MTA box?

On Self-managed plans, you have full root and you can do anything you want. We recommend not running other application services on the MTA box because the resource isolation gets complicated under sending load, but if you understand the tradeoffs, it is your hardware. On Managed plans, we keep the box dedicated to MTA and supporting services (monitoring agents, log shippers, bounce processors). If you need application code colocated, we can provision a second node in the same rack with a private interconnect.

Do you do BGP / IP migration if we already have our own /24?

Yes. If you have your own IP allocation you want to keep using, we can route and announce it from our network. This is common with ESPs that have built up a dedicated reputation footprint over years and want to keep their existing IPs. The setup takes 5 to 10 business days. There is no extra fee on Managed plans, and a small one-time setup fee on Self-managed plans (€500).

How does redundancy and failover actually work on HA Pair and Cluster tiers?

HA Pair is two nodes with a floating IP managed by keepalived. Failover is automatic on hardware failure or unhealthy MTA process — typically completing in under 30 seconds. The two nodes can be in the same rack (lower latency, higher correlated failure risk) or in different PoPs (higher latency, geographic redundancy). Cluster is multi-node with cluster-aware MTA configuration. KumoMTA cluster uses shared storage (NFS or Ceph) for queue persistence; PowerMTA cluster uses distributed VirtualMTA configuration; MailerQ cluster scales horizontally on RabbitMQ partitioning. We design the cluster topology with you during onboarding.

Can we use our own monitoring stack (Prometheus, Datadog, Splunk)?

Yes. The MTA exposes metrics in Prometheus format on a documented endpoint. KumoMTA has native Prometheus metrics. PowerMTA exposes XML accounting that we convert to Prometheus via a sidecar. MailerQ has its own management API that we wrap. From there, you can scrape into your own Prometheus, ship to Datadog or Splunk via their respective agents, or hook into anything else that consumes Prometheus or HTTP metrics. We provide example Grafana dashboards as a starting point.

What happens if our sending profile suddenly spikes 10x for Black Friday or a product launch?

The hardware tiers are sized for sustained throughput at the published volume. A 10x spike for a few hours is usually absorbed by the queue without issue — KumoMTA and PowerMTA both queue gracefully. What can break is the per-receiver throttling, where you might hit Gmail or Microsoft soft limits faster than the warmed reputation supports. For known seasonal spikes, we recommend reaching out 2 to 4 weeks in advance so we can adjust throttle profiles, pre-warm additional capacity, or temporarily provision additional nodes. Customers who tell us about the spike in advance never have an issue. Customers who do not, sometimes do.

Are you a good fit for cold email infrastructure?

For agencies and ESPs who run cold email professionally — meaning lists with consent provenance, real B2B targeting, proper unsubscribe handling, and reasonable complaint rates — yes. We have several cold email agencies on Managed Pro and Cluster tiers and they do well. For senders running scraped lists, no consent provenance, complaint rates above 0.3%, or anything that smells like list-bombing, no. The AUP excludes those use cases and we enforce it. We would rather lose the deal than lose the netblock.

How does support work on Self-managed plans after the 30-day post-install window?

You can buy support hours as needed (€180/hour, blocks of 5 or 10 pre-paid). You can buy a monthly support retainer (€500/month covers 4 hours of engineer time, rolling). Or you can upgrade to one of the Managed plans, in which case ongoing support is included. Most Self-managed customers run without buying support after the initial window because the systems are stable, but the option is there. Emergency support (truly down, not "we have a question") is available pay-per-incident at €350/hour during business hours, €500/hour after-hours.

Can you help us decide between KumoMTA and PowerMTA before we sign?

Yes, this is what the discovery call is for. We do not push one over the other because we run both. The decision usually comes down to four questions: do you have an existing PowerMTA license or operational footprint (lean PowerMTA), is your procurement team comfortable with open-source for this layer (lean KumoMTA), how comfortable is your team with Lua-based configuration versus declarative configs (KumoMTA needs Lua, PowerMTA does not), and what is your tolerance for licensing costs as a recurring line item (KumoMTA wins). We will walk you through the answers in 30 minutes and you walk away with a clear recommendation.

What about email receiving — can we use these servers for inbound mail too?

These servers are tuned for outbound, not inbound. Inbound mail receiving is a different operational problem (spam filtering, virus scanning, mailbox storage, IMAP/POP access for users). We do not offer inbound mail hosting on the same boxes because mixing inbound and outbound on a single MTA introduces operational complications most senders do not want. If you need inbound, we can co-locate a separate server running Halon or Postfix tuned for inbound, but it would be a separate product line. For most customers, inbound is handled by Google Workspace, Microsoft 365, or a separate hosted service like Mailbox.org.

Do you support IPv6 sending out of the box?

Yes, but with caveats worth understanding before you turn it on. We allocate IPv6 to every dedicated server and the MTAs are configured to use IPv6 where the receiver supports it. The caveat: many large mailbox providers, particularly Microsoft, are stricter about IPv6 senders than IPv4 senders, and an IPv6 send that fails authentication tends to get rejected outright rather than soft-failed. For senders with imperfect SPF or DKIM alignment, IPv6 amplifies problems. Default for new managed customers is IPv4-only sending until alignment is verified clean, then we enable IPv6. For self-managed customers, you make the call. The hardware supports it either way.

How do you handle GDPR-related access requests if a recipient asks for their data?

Recipient data on the MTA is the message content (subject, body, headers) and the recipient address itself, retained per your configured log retention. If a recipient submits a Subject Access Request to you under GDPR Article 15, and the data is on our infrastructure, we work with you to extract the relevant logs within the 30-day GDPR response window. The infrastructure is yours, but we are the technical operator and we are obligated to assist. We have done this for several customers in regulated industries and the workflow is documented. The request itself comes to you (you are the controller), and you delegate the technical extraction to us where needed.

How much throughput does a dedicated MTA actually sustain?

On dedicated infrastructure the sustained ceiling runs to roughly five million messages per hour per point of presence, but the practical limit is almost always the receiving providers rather than the MTA. Gmail, Yahoo, and Microsoft each apply their own acceptance rates, and Microsoft adds a per-tenant external-recipient cap that a concentrated burst can trip. A well-tuned PowerMTA or KumoMTA setup paces delivery per receiving domain so the outbound rate matches what each provider will accept, which means real-world throughput is a function of reputation and provider tolerance, not raw server capacity. We tune that pacing as part of operating the platform, because an MTA that fires faster than the receivers accept only manufactures deferrals. The customers who try to force a higher rate than the receivers will take end up slower overall, since every deferral pushes the retry into a queue that competes with the fresh traffic still arriving behind it.

Three ways to start

Most decisions on this page get made on a discovery call

Email infrastructure decisions are not the kind that gets made off a pricing page. The right architecture depends on your volume profile, your team capabilities, your customer model, your existing investments. The discovery call is 60 minutes and we will leave you with a written recommendation whether or not you become a customer. If you have already decided, the order form is on the pricing section above.

Phone +43 1 205 11 80 Mon–Fri · 9–18 CET
Email [email protected] Avg response 4h business
Office Fleischmarkt 1, 1010 Wien By appointment