Enterprise Linux Infrastructure: High-Performance Mail Engine (SMTP/MTA), Proxmox/LXC Automation, Asynchronous DNS Validation & Autonomous AI Telemetry Loop

Cliente Freelancer · Remoto · Remoto · freelance · mid · 12.500–25.000 INR

Publicada el 2026-07-21

Descripción de la oferta

Overview We are seeking an elite, expert-level Systems Engineer and Full-Stack DevOps Specialist to finalize an open-source mail transport infrastructure, build an automated client-onboarding DNS pipeline, and deploy a real-time self-healing analytics engine. This is a highly optimized environment focused on absolute IP isolation, programmatic resource constraints, and predictive deliverability tracking. The successful freelancer will deliver a production-ready, highly secure configuration across a multi-tenant virtualization deployment matrix. Project Scope of Work Phase 1 Finalization: Application-Layer & DNS Automation • CNAME-Based Client Authentication: Implement a custom customer-onboarding verification layer. When clients input a domain, the backend must dynamically generate unique cryptographic signing keys and map specific domain records (DKIM as CNAME selectors, custom SPF includes, and DMARC text strings) pointing directly to our authoritative central infrastructure records. • Dynamic UI Onboarding Stream: Update existing frontend checkout assets to capture domain inputs, surface specialized step-by-step injection instructions matching top global registrars (GoDaddy, Cloudflare, Namecheap, Hostinger, SiteGround, etc.), and process dynamic text handling for custom manual entries. • Asynchronous Resolver Verification Loop: Build a low-overhead background engine that automatically polls the client’s public zone files using non-blocking asynchronous requests. The engine must act as a strict security gate, holding the client's mail transport route completely locked until all required DNS records resolve perfectly. Phase 2 Execution: Enterprise Cluster Scaling & Network Expansion • Rotational Multi-IP Egress Clustering: Evolve a single-IP source-binding architecture into multi-IP, round-robin egress pools assigned dynamically per customer subscription tier. • Just-in-Time Subnet Scaling: Develop an automated monitoring daemon that tracks IP block utilization on our bare-metal nodes. The moment available network assets fall below a critical threshold; the script must flag an administrative warning to fetch additional contiguous IP blocks programmatically. • Production Subnet Expansion Integration: Upon availability of a portable, clean /24 subnet lease, successfully provision and link the entire contiguous 256-address allocation block into the live environment, instantly unblocking public production onboarding scale and opening up all high-concurrency 3-IP and 5-IP single-tenant clusters. Phase 3 Implementation: Predictive Deliverability Dashboard & Self-Healing Loop • Asynchronous Analytics Telemetry: Integrate a real-time HTTPS telemetry ingestion hook to parse structured asynchronous JSON logs sent from host-side log shippers, safely writing metrics to the database schema under 500ms using optimized caching. • Headless UI Reputation Component: Build a lightweight UI dashboard component with non-blocking visual loading indicators that maps 11 crucial payload variables (including open/bounce trends, authentication alignment, and overall sender health scores). • Dynamic Rate-Sensing State Machine: Program a zero-trust, autonomous cooling loop that dynamically scales backend mail engine throughput. The system must operate across three strict states: o Green (Optimal Baseline): Standard high-velocity sending matrices. o Yellow (Adaptive Cooling): Automatically freezes frontend campaign execution, opens an optimization tip console, and drops connection/throughput capacity by 50% if transient ISP deferral spikes occur. o Red (Infrastructure Lockdown & Suppression): Instantly drops the frontend view to a critical block screen, halts the offending tenant's queue, and routes hard-bounce/FBL event signatures directly into a global suppression table. • Multi-Brand Administrative Command Center: Stand up the administrative management UI featuring a global subnet health monitor, an automated pool-exhaustion warning system, and a master strictness toggle switch to govern tenant compliance levels across different product tracks. Compliance Gate & Strict Information Security Rules Please review these communication boundaries carefully before bidding: 1. Formal Mutual NDA Execution: No technical collaboration, architecture validation, or credential sharing will begin until a comprehensive, legally binding Mutual Non-Disclosure Agreement (NDA) and Intellectual Property Assignment are signed by both parties. 2. Zero Public Disclosure: Under no circumstances will core technical documentation, internal server IP addresses, code snippets, or master repository structures be shared publicly or posted within the unencrypted Freelancer workstream chat. 3. Encrypted Staging & Onboarding: All internal node blueprints and specific configuration details will be handled exclusively through secure, private client channels only after the compliance gate is cleared. Budget, Fixed-Price Milestones & Delivery Funds will be distributed via a staggered, milestone-based framework linked strictly to verified functional steps inside our private staging sandbox environment: • Milestone 1: CNAME Key Generation, Backend DNS Automation & Registrar UI Integration • Milestone 2: Non-Blocking DNS Polling Loop, Mail Engine Lock Integration & /24 Subnet Integration • Milestone 3: Transmission & Intelligence Layer (Telemetry Ingestion API, Real-Time Log Parser Matrix, 6.6% Server-Side Finance Ledger Writing, Headless UI Reputation Component) • Milestone 4: Phase 1B: Dynamic Rate-Sensing State Machine, Suppression Loops, and Administrative Command Center Requirements • Deep expertise in Linux System Administration (Debian/Ubuntu), virtualization environments, ZFS storage arrays, and advanced MTA mail server configurations (sender-dependent transport mapping, loopback access parameters). • Strong full-stack programming capability (PHP, Node.js/Python microservices, and JavaScript/React) for building non-blocking backend daemons, high-performance API endpoints, and clean asynchronous customer dashboards. • Familiarity with RIR registry systems, IP reputation filtering (Spamhaus/UCEPROTECT compliance), and automated infrastructure orchestration loops. • Adherence to strict coding discipline, repository hygiene, and rigorous performance engineering protocols to maximize layout metrics and ensure system requests complete without blocking critical execution threads.

Skills

Fuente original: freelancer

Análisis JobHunter