Skip to content

/ Managed infrastructure — KumoMTA

The mail transfer agent professionals run — operated for you.

KumoMTA is the open-source, Rust-built MTA that Postmark migrated its entire platform onto, and the engine high-volume senders reach for when delivery is the business rather than a feature. Running it well is a discipline: per-ISP shaping, per-tenant queues, IP warming, Lua policy. We run it on dedicated infrastructure so you get the engine and the operation without learning either — the own-infrastructure layer, without operating it yourself.

/ Quick answer

Managed KumoMTA is a service that deploys and operates KumoMTA — the open-source, Rust-based mail transfer agent built for high-volume sending — on dedicated infrastructure for you. KumoMTA was built by the team behind PowerMTA, released under the Apache 2 license, and is the engine Postmark migrated its entire platform onto, documenting faster queue times to every major provider. It belongs to the category of bulk-sending MTAs — routing to tens of thousands of external destinations with per-ISP throttling — not the receiving MTAs (Postfix, Exim) that the market often confuses it with. Managed means we run the per-ISP shaping, per-tenant isolation, IP warming, and reputation work; you keep your IPs and reputation and never write a line of Lua. The sweet spot is roughly 500K to 5M emails per day.

  • Rust · Apache 2

    Open-source, built by the PowerMTA team. No license server to phone home, no validation that can halt your sending.

  • ~1.2s

    Postmark's documented Gmail queue time on KumoMTA, down from ~2s on PowerMTA — their numbers, the engine you'd run.

  • Per-tenant

    Tenant is first-class in the queue — the technical base of real white-label, not a label on a shared pool.

  • 500K–5M

    Emails per day where a bulk-sending MTA earns its place. Below that, packaged Postfix is enough.

/ 01 — The right category

Why is a bulk-sending MTA a different thing from the mail server you already know?

Most discussions of mail transfer agents quietly conflate two categories that were built for opposite jobs. A receiving MTA — Postfix, Exim, Sendmail — is designed to accept mail and route it to a handful of internal destinations: mailboxes, a few relays. A bulk-sending MTA — KumoMTA, PowerMTA — is designed to push outbound mail to tens of thousands of external destinations at once, each mailbox provider with its own throttling policy, reputation assessment, and acceptance behavior. The difference is structural, not a matter of tuning, and it is where expensive mistakes happen in both directions.

Run a receiving MTA for high-volume outbound and you hit performance walls that no amount of configuration removes: the queue architecture was never meant to shape traffic per-destination across thousands of providers. Buy a commercial bulk-sending MTA for a few thousand messages a day and you pay for an engine you will never load. The category is the first decision, and getting it right is what separates a sending setup that scales from one that has to be replaced at exactly the moment volume justifies the investment.

KumoMTA sits firmly in the bulk-sending category, and it was built by people who had spent careers there. Its queue architecture rolls destinations up by MX fingerprint automatically, shapes traffic per provider, and isolates tenants at the queue level — the behaviors that define the category rather than decorate it. Choosing it is choosing the right kind of engine for outbound sending at scale; managing it well is the separate discipline this service exists to carry.

/ 02 — Per-ISP shaping

What does a bulk-sending MTA do that a flat queue cannot?

Every mailbox provider wants to be sent to differently — its own connection limits, its own pace, its own backoff when it is busy. A flat queue ignores that and pushes everything as fast as it can, which is how a sending burst turns into deferrals and throttling. A bulk-sending MTA shapes the flow per provider. Toggle between the two below and watch what happens to the same outbound batch.

Gmail
Yahoo
Microsoft
Apple

With per-ISP shaping, each provider receives traffic at the rate it accepts — connections, pacing, and backoff tuned per destination. Mail flows; deferrals stay low.

Illustration of the shaping mechanism, not a live capture. The point is the architecture: a bulk-sending MTA shapes per destination; a flat queue does not.

/ 03 — Public validation

The strongest proof is a company that bet its platform on it.

Postmark — a transactional email provider with a sixteen-year deliverability reputation — migrated its entire sending layer from PowerMTA to KumoMTA and published the results. Average queue time, the gap between accepting a message and completing the SMTP handoff, dropped across every major provider, while bounce rates held steady. These are Postmark's production numbers, not ours; they describe the engine this service runs.

Postmark average queue time (seconds) — lower is faster 2 1.2 Gmail 4.6 3.2 Yahoo 4.8 2.8 Microsoft 8 6.3 Apple PowerMTA (before) KumoMTA (after)

Source: Postmark's published account of its PowerMTA-to-KumoMTA migration. Your results depend on your IPs, content, and lists — the engine is necessary, the operation around it is what realizes the result.

/ 04 — What we operate

The license is the cheap part. The operation is the job.

The most misread number in self-hosted email is the software cost. KumoMTA is free; even PowerMTA's license is a small fraction of what a serious sending operation actually costs. The people, the monitoring, the feedback-loop maintenance, the per-ISP tuning — that operational layer is where the real expense and the real expertise live, and it is precisely the set of responsibilities a managed service takes off your team.

MTA operation

KumoMTA deployed, tuned, and upgraded. Lua policies written and maintained. Queue architecture configured to your sending. You never touch a config file.

Per-ISP shaping

Connection rates, delivery limits, and backoff tuned per mailbox provider, adjusted when Gmail, Yahoo, Microsoft, or Apple change their requirements.

IP warming

Dedicated IPs warmed on a schedule matched to your real send curve, not a generic template, so there are no throttle surprises as volume ramps.

Reputation monitoring

Postmaster feedback, blocklist status, and inbox placement watched daily across the major receivers. Drift caught while it is still small.

Bounce & FBL

Bounce classification and feedback-loop processing handled in policy, suppression maintained, root causes traced rather than just logged.

Observability

Real-time logs and delivery events streamed back, so you see accepted, delivered, deferred, bounced, and complained without building the pipeline.

/ 05 — KumoMTA or PowerMTA

We run both — and the right one depends on you.

KumoMTA is the primary engine for most senders, and the reason is a combination of economics and architecture. It carries no license cost, it was built in Rust for modern cloud deployment with autoscaling and containers in mind, and below roughly five million messages a day it matches PowerMTA on the capabilities that matter. Just as important for mission-critical sending, it has no license server: PowerMTA validates a license file periodically against the vendor's server, and if that validation fails — an expiry, a connectivity problem — the MTA stops accepting messages. That is an external dependency on someone else's uptime that open-source removes entirely.

PowerMTA still has its place. Two decades of production use, enterprise support with a vendor on the other end of a contract, and a track record at the very top of the volume range make it the right call for some organizations — particularly above five million a day, or where a compliance requirement specifically mandates a commercial solution with formal support. Running both means the recommendation is driven by your situation rather than by which engine we happen to offer.

It also means migrations go both ways honestly. The most common direction is PowerMTA to KumoMTA, and it is real work — the configuration paradigms differ, virtual-MTA blocks become egress pools, bounce patterns become Lua classifiers, and there is no automatic converter. Occasionally a team discovers that the Lua flexibility it gained costs more in operational complexity than the license it saved, and the right move is the reverse. We plan for that openly rather than pretending the newer engine wins every time, because it does not.

/ 06 — Side by side

Managed KumoMTA against running it yourself — including where DIY wins.

The comparison that matters here is not against a competitor but against doing it yourself, because that is the real alternative for this buyer. Self-hosting wins outright when your team has the capacity and the appetite, and at low volume packaged Postfix is simply the better tool. The matrix marks both.

Filter:
Dimension Self-hosted / Postfix This platform Managed infrastructure
The MTA Postfix — a receiving MTA repurposed for sending KumoMTA — a bulk-sending MTA, the engine Postmark migrated to
Per-ISP traffic shaping Manual master.cf tuning; limited per-destination control Native per-ISP shaping and MX rollup, tuned by the team
Per-tenant isolation Not first-class; tenants share queue behavior Tenant is first-class in the queue — true white-label base
Who operates it You — config, monitoring, warming, incident response Our team — you integrate once and send
Lua policy You write and maintain it We write and maintain it; you never touch Lua
License model PowerMTA ~$8K/yr + license server that can halt sending KumoMTA: Apache 2, no license server, no phone-home
Real cost driver The operational layer (people, monitoring) dominates TCO That operational layer is included, not staffed by you
Reputation ownership Yours, but you carry all the work to protect it Yours — isolated, warmed, and monitored for you
Raw control / DIY fit Their edge Total control if your team wants to operate it Managed — control retained, operation handed over
Best below ~500K/mo Their edge Packaged Postfix is enough and simpler Over-engineered at low volume — we will tell you so

/ 07 — When to skip it

When managed KumoMTA is the wrong tool — and what to use instead.

Two situations make this service the wrong choice, and naming them is what makes the recommendation trustworthy when it points the other way. The first is volume. Below roughly five hundred thousand emails a month, a well-configured Postfix — often through a packaged stack — handles sending without the per-ISP shaping a bulk-sending MTA exists to provide. At that scale the shaping has little to do, and a managed KumoMTA deployment is a heavier and more expensive setup than the job calls for. Simpler is genuinely better here, and we would point you to it.

The second is in-house capacity. A team that has the engineering bandwidth to operate infrastructure, the appetite to maintain Lua policy and monitoring, and the desire to own the whole stack can self-host KumoMTA directly — it is open-source and well-documented for exactly that. The managed service exists to carry the operational layer for teams that do not want it on their plate; for a team that does want it, paying someone else is the wrong trade. The honest dividing line is whether running the MTA is work you want to own or work you want gone.

/ Common questions

What teams ask about managed KumoMTA.

What is managed KumoMTA, and who is it for?

Managed KumoMTA is a service where we deploy and operate KumoMTA — the open-source, Rust-based mail transfer agent built for high-volume sending — on dedicated infrastructure on your behalf. It is for senders who have understood that deliverability is an infrastructure problem rather than a software one: teams above roughly 500,000 emails a month, often migrating off a shared SaaS that suspended them or a self-hosted setup that outgrew the people maintaining it. You get the engine professional ESPs run, the per-ISP shaping and per-tenant isolation it provides, and a team that operates it — without learning Lua, watching queues, or staffing a mail-operations function.

Why KumoMTA specifically, and not Postfix or PowerMTA?

Because it is the right tool for outbound sending at scale, and the market validated it publicly. The common confusion is treating all MTAs as interchangeable, when receiving MTAs (Postfix, Exim) and bulk-sending MTAs (KumoMTA, PowerMTA) are structurally different — a receiving MTA routes to a handful of internal destinations, a bulk-sending MTA routes to tens of thousands of external ones, each with its own throttling and reputation. KumoMTA was built by the team behind PowerMTA, in Rust, under the Apache 2 license. When Postmark rebuilt its sending layer it moved the entire platform onto KumoMTA and published measurably faster queue times to every major provider. We run KumoMTA as the primary engine and support PowerMTA for migrations, because the right answer depends on your volume and your team.

Do I lose control by having KumoMTA managed instead of self-hosting it?

No — you keep the control that dedicated infrastructure gives you and shed the operational burden of running it. You retain your own IPs and reputation, visibility through logs and delivery events, and the ability to request shaping or policy changes. What you hand over is the part that consumes engineering time without producing product: the daily monitoring, the per-ISP tuning, the bounce classification, the IP warming, the Lua policy maintenance. The software license is the smallest line in a self-hosted operation's real cost; the people, monitoring, and feedback-loop work dominate it, and that operational layer is exactly what managed absorbs.

How fast is KumoMTA compared to what I am running now?

The clearest public benchmark is Postmark's migration. After moving from PowerMTA to KumoMTA, Postmark documented average queue time — the time from accepting a message to completing the SMTP handoff — dropping across every major provider: Gmail to about 1.2 seconds from 2, Yahoo to 3.2 from 4.6, Microsoft to 2.8 from 4.8, and Apple to 6.3 from 8, while bounce rates held steady and the reputation built over sixteen years was preserved. Those are Postmark's numbers from their own production, not ours, but they reflect the engine you would be running. Real-world results depend on your IPs, content, and lists, which is why the warming and shaping work matters as much as the software.

What is the risk with PowerMTA's license server that KumoMTA avoids?

PowerMTA requires a valid license file that is checked periodically against the vendor's licensing server. If that validation fails — an expired license, a connectivity problem reaching the server — the MTA stops accepting new messages. For mission-critical sending, that introduces an operational dependency on an external vendor's infrastructure that has nothing to do with your own uptime. KumoMTA, being open-source under Apache 2, has no license server to phone home and no validation that can halt your sending. For senders who want to own their failure modes, removing that dependency is a concrete reason to prefer it.

How does per-tenant isolation work, and why does it matter?

KumoMTA treats the tenant as a first-class part of its queuing architecture rather than an afterthought bolted onto an IP. Each tenant's traffic is queued and shaped independently, so one sender's reputation problem does not bleed into another's — the noisy-neighbor failure that shared pools cannot prevent. This is also the technical foundation for white-label sending: a reseller is a genuinely isolated tenant at the queue level, not a label on a shared pool. If you operate a platform that sends on behalf of your own customers, that isolation is the difference between white-label as architecture and white-label as marketing.

When do I not need managed KumoMTA?

Below roughly 500,000 emails a month, a well-configured Postfix — often via a packaged stack — handles the job without the per-ISP shaping a bulk-sending MTA provides, and managed KumoMTA would be over-engineering. The volume where queue management and per-ISP throttling start to matter is the 500K-to-5M-a-day band; under it, simpler is better. The other honest case is a team with genuine in-house capacity that enjoys operating infrastructure and can carry the Lua configuration and the monitoring themselves — for them, self-hosting KumoMTA directly is a reasonable path, and we will say so rather than sell them a service they do not need.

The engine the pros run. The operation off your plate.

Tell us your volume, your current MTA, and whether you are migrating or starting fresh. We will tell you honestly whether KumoMTA, PowerMTA, or simply Postfix fits — and if managed is the right move, what running it on dedicated infrastructure would look like for your sending.

Book infrastructure review