[pfx] OT: k8s network presentation

2024-10-28 Thread Nico Schottelius via Postfix-users
Hello postfix users, I know I am probably not the most conventional guy moving postfix into IPv6 only kubernetes stacks, but there are good reasons for it. To explain a bit the background of all this "nonsense", I wanted to point to a presentation I will be giving in the RIPE IPv6 working group

[pfx] Re: Postfix in kubernetes - short status update

2024-10-28 Thread Nico Schottelius via Postfix-users
Hello Viktor, Viktor Dukhovni via Postfix-users writes: > On Sat, Oct 26, 2024 at 12:06:12AM +0900, Nico Schottelius via Postfix-users > wrote: > >> The maps/hashes that make a lot of sense on VMs/servers for avoiding >> reloading postfix, do not make much sense in the

[pfx] Re: Postfix in kubernetes - short status update

2024-10-28 Thread Nico Schottelius via Postfix-users
Wietse Venema via Postfix-users writes: > Consider using LMDB or CDB instead. > > - CDB is optimized for tables that don't change. > > - LMDB was proposed 10 yeara ago as a replacement for Berkeley DB, > because of a licensing issue. Thanks, using lmdb works like charm. The main reason I tr

[pfx] Re: Web api for sending email

2024-10-27 Thread Nico Schottelius via Postfix-users
Hey Wesely, Wesley via Postfix-users writes: > Do you know any project which provides HTTP api integrated with > postfix for sending email ? I ask this is because one of my customers > has been using the VPS which has all outgoing smtp ports/traffic > blocked. I don't know anything like that,

[pfx] Postfix in kubernetes - short status update

2024-10-25 Thread Nico Schottelius via Postfix-users
Hello .*, a short update for those who may also be interested in running postfix in k8s: we have a very minimal postfix setup in k8s running: kubectl logs mx1-54b44b9b4b-z7nlt postfix/postlog: starting the Postfix mail system Oct 25 14:25:23 router2 postfix/postfix-script[68]: starting the Postf

[pfx] Re: Postfix in containers/kubernetes

2024-10-18 Thread Nico Schottelius via Postfix-users
Hey Emmanuel, Emmanuel Seyman via Postfix-users writes: > * Nico Schottelius via Postfix-users [18/10/2024 10:55] : >> >> - Others might start using my postfix container due to the lack of an >> official postfix container [2] >> - To avoid that, my recommendation

[pfx] Re: Postfix in containers/kubernetes

2024-10-17 Thread Nico Schottelius via Postfix-users
Marvin Renich via Postfix-users writes: > [...] > Do you expect the postfix devs to release containers for every popular > combination of distribution and containerization technology (Docker, > kubernetes, LXC, OpenVZ, etc.)? Even picking one distribution still > leaves too many containers. No,

[pfx] Re: Postfix in containers/kubernetes

2024-10-17 Thread Nico Schottelius via Postfix-users
Ralph Seichter via Postfix-users writes: > * Nico Schottelius via Postfix-users: > >> As mentioned before, I/we can volunteer to building the image(s) and >> rebuilding them on a new release, if the added workload is a concern. > > Why do I get the feeling that yo

[pfx] Re: Postfix in containers/kubernetes

2024-10-17 Thread Nico Schottelius via Postfix-users
Wietse Venema via Postfix-users writes: > Nico Schottelius via Postfix-users: >> >> Marvin, >> >> Marvin Renich via Postfix-users writes: >> > [...] >> >> - Rerun a docker build & docker push as soon as the underlying OS's >> >

[pfx] Re: Postfix in containers/kubernetes

2024-10-17 Thread Nico Schottelius via Postfix-users
Marvin, Marvin Renich via Postfix-users writes: > [...] >> - Rerun a docker build & docker push as soon as the underlying OS's >> update their package repository >> - Update the Dockerfile once the depending operating system updates >> their image (i.e. The debian based postfix image could

[pfx] Re: Postfix in containers/kubernetes

2024-10-16 Thread Nico Schottelius via Postfix-users
Good morning, Wietse Venema via Postfix-users writes: > Nico Schottelius via Postfix-users: >> [Two-layer architecture: large IPv6-only Kubernetes clusters with >> external connectivity, plus smaller dual-stack, transit-only, >> Kubernetes clusters that gateway from/to ex

[pfx] Re: Postfix in containers/kubernetes

2024-10-16 Thread Nico Schottelius via Postfix-users
Good evening Bill, Bill Cole via Postfix-users writes: > On 2024-10-15 at 22:43:51 UTC-0400 (Wed, 16 Oct 2024 11:43:51 +0900) > Nico Schottelius via Postfix-users > is rumored to have said: > > how do you currently run postfix in containers? > > I don't (and nei

[pfx] Re: Postfix in containers/kubernetes

2024-10-16 Thread Nico Schottelius via Postfix-users
Salut Wietse, Wietse Venema via Postfix-users writes:> > [...] > If there are 'common' container use cases, then I suppose that > Postfix could distrtibute example Dockerfiles for that. While the use cases are likely to differ, a lot of "common" software such as nginx provide minimal containers

[pfx] Postfix in containers/kubernetes

2024-10-15 Thread Nico Schottelius via Postfix-users
Hello fellow postfix users, how do you currently run postfix in containers? As far as I can see there is no official image out there, just a number of people who published their own. If I was to start building an image, I'd likely do something like this: [0]

[pfx] Re: [RFC, sketch] IPv6 only trust of mail network

2024-10-15 Thread Nico Schottelius via Postfix-users
Jaroslaw Rafa via Postfix-users writes: > Dnia 15.10.2024 o godz. 12:36:12 Nico Schottelius via Postfix-users pisze: >> >> You got a point there, there would be a barrier between classic email >> and "secure email" (or whatever term comes to one's mind).

[pfx] Re: [RFC, sketch] IPv6 only trust of mail network

2024-10-14 Thread Nico Schottelius via Postfix-users
Wietse Venema via Postfix-users writes: > The nice part is that trust is decentralized. The bad part is that > decentralized trust does not scale globally. It might work on a > small scale of a few hundred participants. Email is much bigger. A totally different different question, for a PoC wha

[pfx] Re: [RFC, sketch] IPv6 only trust of mail network

2024-10-14 Thread Nico Schottelius via Postfix-users
Wietse, Wietse Venema via Postfix-users writes: > The nice part is that trust is decentralized. The bad part is that > decentralized trust does not scale globally. It might work on a > small scale of a few hundred participants. Email is much bigger. I am trying to understand the concern, but

[pfx] Re: [RFC, sketch] IPv6 only trust of mail network

2024-10-14 Thread Nico Schottelius via Postfix-users
Good morning, Jaroslaw Rafa via Postfix-users writes: > Dnia 14.10.2024 o godz. 13:03:48 Nico Schottelius via Postfix-users pisze: >> >> In a nutshell the idea is to reuse the very >> old, existing "trust of web" idea and mix it together with IPv6 only >&g

[pfx] Re: [RFC, sketch] IPv6 only trust of mail network

2024-10-13 Thread Nico Schottelius via Postfix-users
Hello Viktor, Viktor Dukhovni via Postfix-users writes: > On Mon, Oct 14, 2024 at 01:03:48PM +0900, Nico Schottelius via Postfix-users > wrote: > >> We at ungleich [0] plan to switch towards IPv6 only mail services > > A substantial fraction of email domains are IPv4-on

[pfx] [RFC, sketch] IPv6 only trust of mail network

2024-10-13 Thread Nico Schottelius via Postfix-users
Good morning postfix users, we at ungleich [0] plan to switch towards IPv6 only mail services in the near future and we would like to "revolutionise" the way how we handle mail while we do this step. This mail is to discuss the idea and get some feedback from the community of other postfix users.