Backup MX.
When the primary is down, mail still lands.
Your primary mail server is not always going to be available. Sometimes that is planned: a maintenance window, an infrastructure upgrade, a tenant cutover. Sometimes it is not: an outage, a hardware failure, an ISP problem, a bad DNS change pushed at the wrong moment. With no secondary MX, senders retry for a while and then give up. Some bounce immediately. Some hold for hours and then quit. Either way, you find out by reading customer complaints once the primary is back.
Backup MX is the secondary mail server that catches inbound traffic while the primary is unreachable, queues it, and replays it once recovery completes. No bounces, no lost messages, no Monday-morning post-mortem about the customer mail you cannot get back.
The simplest piece of insurance in the routing portfolio
Backup MX is the lowest-friction product in the Route group. You add a second MX record at a higher priority value than the primary, point it at us, and the mechanism is in place. The day the primary goes unreachable, senders fall through to the secondary. The day the primary comes back, the queue replays. Your team did not have to log in and flip anything.
The same product is the cutover safety net inside Tenant Migration. When DuoCircle moves an M365 or Workspace tenant, Backup MX absorbs the inbound during the propagation window between the old MX and the new one. One mechanism, two use cases. The architecture is small enough to be reliable and old enough to be boring.
The mechanics
Secondary MX, queue, replay on recovery, spam filtering before the queue, planned-window coverage, cutover-window coverage. Six things, all running on the SMTP backbone we have been operating since 2014.
Secondary MX with queueing
Lower MX priority than your primary. When the primary stops accepting mail, senders fall through to the backup automatically. The backup accepts mail, queues it, and waits. You do not have to flip a switch or call anyone for the failover to happen, because the failover is just SMTP doing what SMTP has always done.
Replay to primary on recovery
Once your primary mail server is reachable again, queued mail is replayed in order. Senders see no failure on their side; recipients see mail show up as if there had never been an outage. The replay is throttled so the primary is not flooded the moment it comes back up.
Spam filtering before the queue
Incoming mail is filtered at the secondary before it lands in the queue, so when the primary comes back you do not get a flood of queued spam being replayed alongside real messages. The filter pass at the backup is the same one running on our spam-filtering infrastructure.
Planned-window support
Schedule a maintenance window and Backup MX handles the inbound traffic for the duration. Patch the primary, replace hardware, fail over a database, take the time you need. There is no customer-visible outage on the inbound mail side, because mail keeps flowing through the secondary and replays when you come back.
Cutover-window safety net
When DuoCircle runs a Microsoft 365 or Workspace tenant migration, Backup MX absorbs the propagation window between the old MX and the new one. The same machinery that protects you from an unplanned outage protects you from a planned cutover. One mechanism, two use cases.
Mail infrastructure operating since 2014
Backup MX runs on the same SMTP backbone that handles outbound relay, forwarding, and migration cutovers across the rest of the DuoCircle portfolio. Capacity, monitoring, and operational expertise that has been evolving since 2014, not a service stood up last quarter to fill a feature gap.
The audience
- Operations teams running their own primary mail infrastructure (Exchange, postfix, Domino, custom) that want a queueing safety net behind it for when the primary is down
- Organizations doing planned migrations or cutovers where bouncing inbound mail during the window is unacceptable
- Hosting providers and platforms running mail for customers, where any inbound outage is a billing-impact event
- Risk-averse environments (financial, healthcare, government) where dropped mail has compliance implications, not just operational ones
- Teams that have been bitten once by an unplanned outage and refuse to be bitten the same way twice
We are not the right answer if
Your mail is fully cloud-hosted on Microsoft 365 or Google Workspace and you do not run any mail infrastructure of your own. The cloud platform handles its own availability and you do not have a primary mail server to back up. Backup MX shines when there is a primary you operate, not when the platform owns the whole inbound path.
You need full disaster-recovery-tier email continuity with extended outages measured in days, full inbound and outbound continuity, and an interim sending capability for a workforce. That is a different category of product. Backup MX queues inbound and replays on recovery; it does not pretend to be a continuity desktop.
You only need outbound continuity. Backup MX is an inbound mechanism. If your concern is keeping outbound application mail flowing during your own infrastructure problems, look at Outbound SMTP for the relay layer.
A real expert, same day
When you contact us about Backup MX, the person on the call is the kind of expert who has actually configured Backup MX for production environments and used it as the safety net inside tenant cutovers. We tell you the priority values to use, the queue retention, the failover behavior, and what to expect when the primary recovers.
Reference calls with existing Backup MX customers are available on request. Setup is direct rather than self-serve, because Backup MX is the kind of product where getting the MX configuration right the first time is worth a fifteen-minute conversation.
Talk to an expert about adding Backup MX
Same-day response. Real expert on the call. We tell you the configuration, the queue retention, and how it ties into the rest of your routing setup.