让新旧系统共用同一可靠中继
许多应用、插件与内部服务仍以 SMTP 为最快路径。Sendarix 提供生产级 SMTP 处理、清晰日志与事件结果。
同一中继承载事务流量、通知负载与平台生成消息，无需堆砌脆弱的一次性工具。
SMTP sessions flow through authentication, TLS, and routing enforcement before acceptance. The relay handles throttling, deferrals, and failover while delivery events are tracked via email webhooks and email analytics.
为真实 SMTP 运营而设计
这不仅是简单转发层，而是具备认证支持、排队纪律与可观测性的受控发送管道。
安全提交
SMTP AUTH 与支持 TLS 的提交流程，保护凭据与传输。
吞吐稳定性
为突发流量与日常后台邮件负载提供一致性能。
可见性与日志
通过可搜索日志与事件级追踪快速调查投递结果。
平滑迁移
从旧 SMTP 服务商迁移，无需立即全面重写架构。
专用发送身份
使用经认证的域名与发件策略，符合企业邮件要求。
队列感知可靠性
在峰值期间通过受控排队与重试行为保持投递一致性。
SMTP 中继流程
清晰的四步流程，保持基础设施可预测、可调试。
1. 连接
应用通过 SMTP 凭据连接并建立安全会话。
2. 接受
消息经验证后加入队列，以受控方式处理。
3. 路由
流量经由具备韧性与服务商感知行为的投递路径。
4. 追踪
结果事件与日志提供运营信心与更快排障。
Real-World Scenario: Legacy System Integration
An internal system sends scheduled reports via SMTP. The relay authenticates with credentials, processes the message through spam filtering, and delivers it via email routing with TLS enforcement. If the destination server is temporarily unreachable, the retry logic queues the message and delivers it on recovery, with status tracked via email webhooks.
SMTP Command Flow
Understanding the actual SMTP protocol exchange helps when debugging delivery issues and interpreting bounce codes. Below is a complete example of a typical message submission session.
Example SMTP Session
This shows a full session from connection through message acceptance. Replace example.com with your verified sending domain.
S: 220 mail.sendarix.com ESMTP ready
C: EHLO mail.yourapp.com
S: 250-mail.sendarix.com
250-PIPELINING
250-SIZE 52428800
250-8BITMIME
250-STARTTLS
250-AUTH PLAIN LOGIN
250 CHUNKING
C: AUTH PLAIN dXNlcm5hbWUAdXNlcm5hbWUAYWQhZGFzZDhzNG
S: 235 2.7.0 Authentication successful
C: MAIL FROM:<notifications@yoursenddomain.com>
S: 250 2.1.0 OK
C: RCPT TO:<user@example.com>
S: 250 2.1.5 OK
C: DATA
S: 354 Start mail input; end with CRLF.CRLF
C: (message headers and body)
C: .
S: 250 2.0.0 OK: queued as abc123
C: QUIT
S: 221 2.0.0 Goodbye
SMTP Response Code Reference
220
— Service ready (greeting)
235
— Auth successful
250
— Message accepted
354
— Ready for DATA
421
— Try again later
450
— Mailbox temp unavailable
451
— Local error
452
— Storage full
550
— User unknown (hard bounce)
552
— Message too large
554
— Transaction failed (spam/policy)
Authentication and TLS Configuration
Sendarix supports both SMTP AUTH for credential-based submission and TLS for transport encryption. Proper configuration is required for reliable delivery and to avoid intermediate network interception.
SMTP AUTH Mechanisms
SMTP AUTH has several mechanisms. PLAIN and LOGIN are the most widely supported:
AUTH PLAIN
Sends credentials as a single base64-encoded string: [authzid]\0username\0password. Safe over TLS. Do not use over plain HTTP.
AUTH LOGIN
Two-step challenge-response: username prompt then password prompt. Base64-encoded at each step. Also requires TLS.
AUTH XOAUTH2 (OAuth 2.0)
OAuth 2.0 based SASL mechanism for applications using OAuth tokens instead of passwords. Preferred for SaaS platforms where users authorize sending on their own domains.
Recommended Configuration
For most applications: use port 587 with STARTTLS and AUTH PLAIN. Reserve port 465 for legacy clients that cannot upgrade. Never transmit AUTH credentials on plaintext connections.
TLS Configuration
smtp_relay.tls_opportunistic_h4
Connection starts unencrypted on port 587, then upgrades via STARTTLS command after EHLO. If the remote server does not advertise STARTTLS, the connection is rejected — Sendarix never sends credentials over plaintext.
Implicit TLS (SMTPS on 465)
Connection is encrypted from the TCP handshake. No STARTTLS upgrade needed. Preferred by enterprise clients and some legacy systems. Sendarix supports TLS 1.2 and 1.3 with modern cipher suites.
Certificate Verification
Sendarix presents a certificate signed by a known CA. Your SMTP client should verify the certificate chain against trusted root CAs. Disable certificate verification only in controlled test environments.
SMTP TLS Pinning
For high-security applications, you can pin the Sendarix leaf certificate. Monitor certificate rotation announcements and update pinned certificates before expiration.
Provider-Specific Behavior: Gmail vs Outlook
Gmail and Outlook (Microsoft) handle SMTP submission, rate limits, and spam filtering differently. Understanding these differences helps you tune your integration and interpret delivery failures accurately.
Gmail (Google Workspace / Gmail)
Authentication Requirements
Gmail requires SPF, DKIM, and DMARC all aligned for reliable inbox delivery. Messages failing DKIM signing or showing alignment failures are routed to spam or rejected. Sendarix DKIM signs all outbound mail from verified domains.
Rate Limits
Gmail enforces per-IP and per-user sending limits. Standard limits: 500 emails/recipient/day, 2000 emails/day per account for consumer Gmail, 2000 emails/minute for Workspace accounts. Exceeding limits returns 421 or 550 errors temporarily.
TLS Requirements
Gmail requires TLS for all inbound connections. Sending plaintext to Gmail is rejected at the MTA level. Sendarix enforces TLS for all major providers.
Bounce Behavior
Gmail returns 550 for hard bounces (invalid user) and 421 with retry for temporary issues. Soft bounces that persist across multiple delivery attempts convert to hard bounces internally and are suppressed from future sends.
Spam Filtering Signals
Gmail's ML-based spam filter evaluates sender history, engagement rates, content patterns, and authentication status. Low engagement (many marked as spam) degrades future delivery. Sending to engaged recipients consistently improves inbox placement.
Microsoft Outlook / Microsoft 365
Authentication Requirements
Microsoft requires SPF, DKIM (Microsoft-specific selector), and DMARC alignment. They also evaluate sender reputation via postmaster services and Smart Network Services (sns.oregon.trafficmanager.net). Without proper authentication, messages are filtered or rejected.
Rate Limits
Microsoft enforces limits per tenant and per IP: 30,000 emails/day for standard tenants, higher for premium. Per-minute limits vary by tenant age and reputation. Exceeding limits returns 421 and queues messages for retry.
TLS Requirements
Microsoft requires TLS 1.2+ for all inbound mail. They support TLS 1.3 and prefer it. Plaintext connections are rejected. Microsoft also enforces certificate validation — self-signed certs will fail.
Bounce Behavior
Microsoft uses enhanced bounce codes: 550 5.1.1 (unknown user), 550 5.1.2 (bad destination), 550 5.2.1 (mailbox unavailable). They also use 250 OK with diagnostic codes in the message headers for soft failures.
Complaint Handling
Microsoft reports complaints via Feedback Loop (FBL) integration. Messages marked as spam by recipients trigger complaint events in Sendarix. High complaint rates trigger Microsoft's "data fix" process, temporarily blocking your IP until reputation is restored.
Junk Folder Placement
Outlook uses Exchange Online Protection (EOP) with multiple filtering layers: connection filtering, policy filtering, and content filtering. Sending volume patterns, list hygiene, and engagement history all influence junk folder placement.
SMTP Relay Failover Architecture
Sendarix implements multi-layer failover to ensure message acceptance even during infrastructure and provider-level outages. The failover hierarchy operates automatically with no manual intervention required.
Failover Levels
Connection-Level Failover
When the primary SMTP endpoint returns connection errors, timeouts, or 421 retry responses, traffic immediately routes to the next available endpoint in the pool. Connection failures are detected within 5 seconds and failover initiates within 10 seconds.
IP-Level Failover
If a specific sending IP is rate-limited or reputation-blocked at a destination provider, that IP is automatically deprioritized and traffic shifts to alternative IPs in the same reputation tier. Warmup status is respected — cold IPs do not receive production traffic during failover.
Provider-Level Failover
When a destination provider (e.g., Gmail API ingestion) is unavailable, messages queue locally and retry at increasing intervals. The queue is durable — messages are not lost during extended provider outages. Queue depth is visible in the Sendarix dashboard.
Region-Level Failover
For enterprise configurations with multi-region sending, regional endpoints in different data centers handle traffic independently. DNS-based routing directs submission to the nearest available region.
DNS-Based Failover
MX records for your sending domain point to clustered ingress nodes. Sendarix manages DNS failover automatically — no manual DNS updates required when a node fails. TTL is set to 60 seconds to allow fast failover while maintaining stability.
Testing Failover Behavior
Sendarix provides sandbox endpoints for testing failover without affecting production reputation. Use the sandbox to simulate connection failures, 421 responses, and timeout conditions to verify your application handles relay failover gracefully.
Common SMTP Relay Use Cases
SMTP relay is the right choice when you need broad compatibility, existing tool integration, or transactional workload handling without API changes.
Legacy Application Integration
Applications built before modern email APIs existed often have built-in SMTP configuration. Sendarix relay replaces old provider credentials without requiring code changes. Update SMTP host, port, username, and password to start sending.
WordPress / CMS Notification Mail
WordPress, Drupal, and other CMS platforms send email via the server's configured SMTP relay. Installing an SMTP plugin and pointing it to Sendarix routes all notification, registration, and contact form emails through production infrastructure.
CI/CD Pipeline Notifications
Jenkins, GitLab CI, GitHub Actions, and similar tools send build status, deployment alerts, and run reports via SMTP. Configure the CI tool's SMTP settings to Sendarix to route these reliably and avoid alerts going to spam.
Internal Service Alerts
Monitoring tools (Datadog, PagerDuty, Prometheus Alertmanager), cron job failures, and system health checks often rely on email for critical notifications. Sendarix relay ensures these important alerts reach the on-call engineer's inbox.
SaaS Multi-Tenant Notification Sending
SaaS platforms sending notifications on behalf of their customers (appointment reminders, order updates, account alerts) can segment traffic by customer tenant using subaddresses or header-based routing. Each tenant gets isolated reputation management.
E-Commerce Order Confirmations
Order confirmation, shipping update, and delivery notification emails are critical transactional messages that drive customer engagement. SMTP relay integration with e-commerce platforms (Shopify, WooCommerce, Magento) ensures these emails land in the inbox reliably.
Ready to Route Email Through Production Infrastructure?
Get SMTP credentials and start sending in minutes. No architecture changes required.
What sets Sendarix apart: Sendarix SMTP relay runs on the same routing infrastructure as the email API — meaning you get failover, routing rules, and analytics without choosing between SMTP compatibility and modern email infrastructure control.
Related SMTP Configuration Guides
Step-by-step SMTP configuration for the most common email providers and platforms. Each guide covers host, port, encryption, authentication, and provider-specific behavior.
Gmail SMTP Settings
smtp.gmail.com · port 587 · TLS · App passwords
Outlook SMTP Configuration
smtp-mail.outlook.com · port 587 · TLS · OAuth
Yahoo SMTP Settings
smtp.mail.yahoo.com · port 587 · TLS · App password
Office 365 SMTP Setup
smtp.office365.com · port 587 · TLS · OAuth2
Zoho Mail SMTP Settings
smtp.zoho.com · port 587 · TLS · SMTP auth
iCloud SMTP Configuration
smtp.mail.me.com · port 587 · TLS · App password
Proton Mail SMTP Settings
smtp.protonmail.com · port 587 · TLS · Bridge
Yandex SMTP Configuration
smtp.yandex.com · port 587 · TLS · SMTP pass
GMX SMTP Settings
smtp.gmx.com · port 587 · TLS · App password
FastMail SMTP Configuration
smtp.fastmail.com · port 587 · TLS · App password
SendGrid SMTP Settings
smtp.sendgrid.net · port 587 · TLS · API key
Mailgun SMTP Configuration
smtp.mailgun.org · port 587 · TLS · SMTP credentials
Postmark SMTP Settings
smtp.postmarkapp.com · port 587 · TLS · Server token
Amazon SES SMTP Configuration
email-smtp.*.amazonaws.com · port 587 · TLS · SMTP credentials
Mailchimp Mandrill SMTP Settings
smtp.mandrillapp.com · port 587 · TLS · API key
All SMTP configuration guides include provider-specific details for authentication methods, rate limits, TLS requirements, and bounce handling behavior. These guides complement the email routing controls available in your Sendarix dashboard.
常见问题
可以先 SMTP 后迁 API 吗？
可以。许多团队先为速度使用 SMTP，再为更深的产品工作流添加 API。
能否获得投递级可见性？
可以。提供日志与事件流，可检查已接受、已投递与已退信结果。
适合高流量发送吗？
适合。中继为生产平台的持续流量与突发而构建。
应使用哪些端口与加密？
多数生产客户端在 587 端口使用 STARTTLS，或在 465 使用隐式 TLS。避免在公共网络上使用明文 SMTP。
能否将 SMTP 限制为已知 IP？
可以。IP 允许列表是常见企业控制：仅应用服务器、VPN 出口或 MTA 机群可认证到中继。
应用中应如何保管认证凭据？
将 SMTP 凭据存入密钥管理器，人员变动时轮换，切勿提交到源码。推荐按环境分别配置。
每封邮件都新建 SMTP 连接会影响送达率吗？
过度连接抖动会增加延迟与负载。在栈允许时负责任地复用连接，并遵循文档中的速率与并发指引。
旧版 CRM 与打印机能否共用同一 SMTP 中继？
通常可以。SMTP 是旧系统的共通分母；在方案支持时可用域名、标头或子账户分流。
消息大小与附件限制呢？
大负载会增加失败风险与处理时间。请查看方案限制；附件较重时可外链托管。
What is the difference between port 587 and port 465?
Port 587 uses STARTTLS (opportunistic TLS upgrade after CONNECT), while port 465 uses implicit TLS where the connection is encrypted from the start. Both are valid for secure submission. Port 587 is the RFC-compliant standard for message submission; port 465 is deprecated but still widely supported for legacy clients.
How does Sendarix handle greylisting?
When a destination provider returns a 450 or 451 temporary response, Sendarix respects the retry period specified in the SMTP response. Most providers implement greylisting for 30 seconds to 10 minutes. Sendarix tracks these windows and retries within the provider's specified interval to maximize first-attempt success.
What is the maximum message size via SMTP?
Default maximum message size is 50MB including attachments and MIME encoding. For files larger than 25MB, Sendarix recommends uploading to cloud storage and sending a signed link instead. Some providers reject messages over 25MB entirely, regardless of SMTP acceptance.
Can we use subaddressing (user+tag@example.com) with Sendarix?
Yes. Subaddressing is fully supported and passed through to destination mail servers. The plus-address portion is visible to receiving MTA filters and can be used for routing, tagging, or filtering rules on the recipient side.
How do we verify our sending domain with Sendarix?
Domain verification requires adding DKIM records to your DNS. Sendarix provides a DKIM public key pair during setup. Add the TXT record to your domain's DNS, then Sendarix validates the record propagates before signing outgoing mail on your behalf.
