Dovecot Community Edition vs Dovecot Pro

Dovecot 2.4 Community Edition drops replicator, Director and fts-lucene, so scaling IMAP changes. This page shows when the free edition is enough, when Dovecot Pro's Palomar architecture and vendor support are worth paying for, and what each path costs to run.

On this page

When the free Dovecot edition is enough and when Dovecot Pro is needed

If you need to scale IMAP, the free Dovecot Community Edition is enough when your mail service runs on one server or on several servers that all mount the same shared filesystem, and your clustering needs are modest. Dovecot Pro is the documented route when you need carrier or enterprise-scale clustering built on the Palomar architecture, or when you need dedicated vendor support and long-term support commitments. The free edition remains fully usable for many deployments, and nothing in the 2.4 changes stops a well-run single-site mail platform from running on it.

Start by writing down what 2.4 Community no longer provides. According to the Dovecot 2.3 to 2.4 upgrade guide, the replicator is gone and the guide tells you to use NFS or another shared filesystem instead, the Director role is removed, and fts-lucene and fts-squat are replaced by fts-flatcurve or fts-solr. If your current design depends on replicator or Director, the question is not whether the free edition still runs, but which replacement you will build and operate. A shared filesystem design is the free edition's documented answer, and its performance, locking and failure behavior under your load are things your storage team must test.

Dovecot Pro becomes the right call when the cost of that self-built replacement exceeds the cost of a commercial relationship. Ask the vendor how Palomar handles node membership, failover and user placement, what support response terms apply, and what the long-term support window covers. Dovecot Pro pricing is not published, so get a written quote that names the node count, the support tier and the migration work included. The free edition stays the better fit for smaller platforms that can accept community-level support and carry their own runbooks.

Feature split between Dovecot Community and Dovecot Pro

This table compares the IMAP scaling features that Dovecot 2.4 Community Edition removed against what Dovecot Pro offers, along with support and license terms. Read each row as a question to put to the vendor, since exact Pro feature lists are not publicly itemized in the sources we reviewed.

CapabilityDovecot Community EditionDovecot Pro
ReplicationReplicator removed in 2.4; the upgrade guide says to use NFS or another shared filesystem insteadSold as part of the carrier and enterprise cluster offering; confirm the replication design and its supported topologies with the vendor
Director or clusteringDirector architecture removed in 2.4; Lua Director is pointed to only as an unsupported small-scale replacementPalomar architecture is positioned as the successor to Director; confirm the exact cluster model, node counts and failover behavior
Full-text search backendsfts-lucene and fts-squat removed; fts-flatcurve or fts-solr are the listed replacementsConfirm which search backends are supported and whether they match your existing index format
Cluster-ready Palomar architectureNot includedMarketed for carrier and enterprise scale as a highly available, cluster-ready design; request reference architecture and sizing guidance in writing
Vendor supportCommunity support only; no vendor support commitment is statedDedicated vendor support is cited on dovecotpro.com; confirm support hours, severity levels and response targets in the contract
Long-term support and proactive updatesReleased versions such as 2.4.5 (August 28, 2026) are published; upgrade timing is the operator's responsibilityLong-term support and proactive updates are cited on dovecotpro.com; confirm the support window and patch cadence for your version
License termsCore code under MIT for src/lib, src/auth and src/lib-sql; the rest under LGPLv2.1 unless notedCommercial terms set by the vendor; confirm licensing, usage limits and any fees before scoping

How licensing, support and updates differ by edition

The free and paid Dovecot lines differ on who licenses the code, who supports it and who answers when something breaks. The cards below separate those questions so you can check each one against your own obligations and a written Pro quote.

Community code licensing

Dovecot Community Edition is licensed under MIT for the src/lib, src/auth and src/lib-sql directories and under LGPLv2.1 for everything else, according to the COPYING file in the dovecot/core repository. Your legal team should read the COPYING file for the exact version you deploy, because the split decides which files a modification touches. Confirm what LGPL obligations apply if you modify and distribute Dovecot itself, as opposed to only running it.

Dovecot Pro licensing terms

Dovecot Pro is sold by a company that is part of Open-Xchange and is marketed for carrier and enterprise scale. Its license is a commercial agreement rather than the open-source terms of the Community code, so the rights to modify, redistribute and deploy across clusters are defined by the contract. Ask for the written license terms before you design around Palomar, including limits on the number of nodes, sites or users.

Vendor and long-term support

dovecotpro.com cites dedicated vendor support, long-term support and proactive updates for Dovecot Pro. The Community Edition has no vendor support contract, so any fix timing depends on the public project and your own staff or partner. Ask for the support hours, response targets, severity definitions and the support window for each release line in writing, since none of these figures are published on the home page.

Update cadence and upgrade work

Dovecot 2.4 removed the replicator, Director support, fts-lucene and fts-squat, and dsync symlinks from the Community Edition, so a 2.3 to 2.4 move is a configuration project, not a patch. Community releases arrive on the public release page, and you own testing and rollout. Pro customers receive proactive updates, but confirm whether those updates include migration help for the removed components.

Your obligations under each edition

Under the Community Edition you must keep license notices intact, meet LGPL duties if you distribute modified binaries, and staff the patching, monitoring and incident response yourself. Under Dovecot Pro you must meet the contract's usage and confidentiality terms and any reporting or renewal conditions, while the vendor carries support commitments. Map each obligation to a named owner before you choose the edition.

How the Palomar architecture replaces Director

The Director role in Dovecot 2.3 was the answer to a specific scaling problem: sending all users' IMAP sessions for a given mailbox to the same backend so that locking and caching stayed consistent. Dovecot 2.4 removed Director architecture support from the Community Edition. The upgrade guide points small-scale users to Lua Director as an unsupported replacement and states that the role was replaced by the Dovecot Pro Palomar architecture. The practical consequence is that the Community Edition no longer gives you a supported way to route mailbox traffic across a cluster. If your current design depends on Director, treat the upgrade as an architecture decision, not a configuration change.

Palomar is described by Dovecot Pro as a highly available, cluster-ready design for carrier and enterprise scale. Dovecot does not publish, in the material available to us, the internal mechanics of how Palomar routes mail sessions, places mailbox data or handles failover, so you should not assume a one-to-one mapping from Director settings to Palomar components. What the vendor does describe is a cluster-oriented model in which the mail platform is built to run across multiple nodes from the start. Ask Dovecot Pro for architecture diagrams that show session routing, storage placement, node failure handling and how the design behaves during rolling upgrades.

Before you commit, ask for sizing guidance tied to your own profile: mailbox count, peak concurrent IMAP sessions, message growth, search load and recovery time objectives. Ask how Palomar expects shared storage to be presented to the cluster, and whether the design still relies on NFS or another shared filesystem, since the upgrade guide points Community users to exactly that for storage. Also confirm which parts of the architecture are included in the Pro license and which are delivered as services. Those answers determine whether Palomar changes your storage and routing work, or mainly changes who you call when something breaks.

Which edition fits which mail platform

Small and mid-size mail stacks such as mailcow and Mail-in-a-Box use Dovecot as their IMAP server, and mailcow documents a built-in full-text search engine on top of it. For a single-node installation serving a modest number of mailboxes, the Community Edition covers IMAP, POP and search through the packaged configuration, and the upgrade guide gives the migration path for the 2.4 changes. What the free edition lacks is replication, Director-based routing and the fts-lucene plugin, which Dovecot 2.4 removed. Operators who relied on the replicator must move to NFS or another shared filesystem, and full-text search must move to fts-flatcurve or fts-solr.

  • Replication: The replicator is gone from Community Edition, so a second mail node needs a shared filesystem design you run and monitor yourself.
  • Full-text search: Move from fts-lucene to fts-flatcurve or fts-solr and re-index mailboxes after the change.
  • Symlinked dsync: Scripts that call the dsync symlink must switch to doveadm sync or doveadm backup.
  • Packaged stacks: Check whether your mailcow or Mail-in-a-Box release has tested the 2.4 configuration before you upgrade the Dovecot package.
  • Cost: Dovecot Pro is not a fit for most single-node stacks unless the business case rests on vendor support.

Before you commit, confirm with the stack maintainer which Dovecot version it ships and whether its search plugin still works after the 2.4 changes.",

What each Dovecot path costs to run

This table breaks down who gets paid for what under Dovecot Community Edition and Dovecot Pro, and which costs are one-time or recurring. Read it as a checklist for building a like-for-like estimate, since the free edition's software cost is only part of the total. Dovecot Pro pricing is not published, so the main takeaway is that the quote request must state the scale, storage design and support expectations.

Cost componentDovecot Community EditionDovecot Pro
Software licenseFree under open licenses (MIT for src/lib, src/auth and src/lib-sql, LGPLv2.1 for the rest)Subscription or license fee from the vendor; confirm terms in writing
Shared storageYou pay for NFS or another shared filesystem, since the replicator was removed in 2.4 (recurring)Storage design depends on the Palomar cluster layout; confirm the storage requirements with the vendor
Replacement of removed featuresEngineering time to replace replication, Director and fts-lucene or fts-squat, for example with fts-flatcurve or fts-solr (one-time, then ongoing)Covered by the product architecture as described on the vendor site; confirm which features are included
Vendor supportNone included; support comes from your own team or a contracted partner (recurring)Dedicated vendor support and long-term support are cited on dovecotpro.com (recurring, typically part of the fee)
Testing and upgradesYour team tests each release, including the 2.4 migration path (recurring with each release cycle)Proactive updates are cited on dovecotpro.com; ask what testing the vendor performs and what you still validate
Migration and cutoverOne-time work to move from Dovecot 2.3 Director or replicator setups and to run doveadm sync or backupOne-time work to plan the move to the Palomar architecture; ask for the migration scope in the quote
Main cost driversMailbox count, storage IOPS, number of engineers on call, and how many custom plugins you maintainScale tier, number of clusters, support level and term length; ask for the price basis in writing

Moving from Dovecot Community to Dovecot Pro, or back

This sequence turns a list of removed Dovecot 2.4 features into a tested, vendor-confirmed cutover plan, so the team knows which workloads move, what replaces them, and what is lost if the platform later returns to the Community Edition.

  1. Inventory removed features in use

    The mail platform team, working with the people who run the Dovecot servers, lists every place the current deployment depends on features that Dovecot 2.4 removed from the Community Edition: the replicator, Director architecture, the fts-lucene or fts-squat full-text search plugins, and any scripts or cron jobs that call the dsync symlink. Check configuration files, systemd units, monitoring checks and backup jobs, not only the main config. The output is a written inventory with one row per feature, the host or cluster it runs on, and the owner. Done when every row has an owner and nobody can name a removed feature that is absent from the list.

  2. Map each feature to its documented replacement

    For each inventory row, the team records the replacement that Dovecot's 2.3 to 2.4 upgrade guide documents: NFS or another shared filesystem in place of the replicator, Lua Director as an unsupported small-scale option or the Palomar architecture in Dovecot Pro in place of Director, fts-flatcurve or fts-solr in place of fts-lucene and fts-squat, and doveadm sync or doveadm backup in place of the dsync symlink. Note where a replacement changes behavior, such as search index rebuilds or storage layout, and who must approve that change. The output is a mapping table signed off by the platform owner. Done when every removed feature has a replacement or a documented decision to drop it.

  3. Confirm Dovecot Pro scope in writing

    If the destination is Dovecot Pro, the buyer asks the vendor, Dovecot Pro, which architecture components, cluster design, support terms, and long-term support commitments apply to the mapped workload. Dovecot Pro is sold by a company that is part of Open-Xchange, and its home page cites dedicated vendor support and proactive updates but publishes no prices, so ask for the scope, the license terms and the migration assistance in writing. Ask whether migration support is included or separately billed, and what recurs after go-live. Done when the signed scope names the Palomar components, the support level, the migration responsibilities of each party, and the fees, which are one-time and which are recurring.

  4. Build a staging cluster that mirrors production

    The infrastructure team builds a staging environment with the same Dovecot version family, storage backend, search plugin, authentication source and client mix as production, using a copy or representative sample of mailboxes. Shared storage is exercised over the same NFS or shared filesystem layout planned for production, and the team confirms that the Community or Pro package is installed from the vendor channel the organization will support. The output is a runbook that lists exact versions, config diffs and host roles. Done when the staging cluster passes a basic login, delivery and search test with production-like data volumes.

  5. Test migration, search and recovery on staging

    The team runs the mapped migration on staging using doveadm sync or doveadm backup where data moves between instances, rebuilds full-text indexes with the new search plugin, and tests failover by taking one node out of service. Compare mailbox counts, message flags, folder structure and search results against the source, and sample client behavior from IMAP and mobile clients. Record the rollback steps and time them against the cutover window the business has agreed. Done when reconciliation reports show no unexplained differences and a rollback has been rehearsed successfully at least once.

  6. Freeze, sync and cut over production

    The team announces a maintenance window, stops new writes or drains connections as the runbook requires, runs the final incremental sync, switches the load balancer or DNS to the new cluster, and verifies IMAP and POP access, delivery through the MTA, and search from a sample of accounts. Keep the old system read-only and intact until verification is complete. The output is a signed cutover record with timestamps, the reconciliation results and the named owner of each check. Done when every verification item is ticked and the old system is retained for the agreed rollback period.

  7. Document the post-cutover state and the way back

    After cutover, the team updates architecture diagrams, backup and restore procedures, monitoring thresholds and the support contacts, and removes the removed-feature references from configuration. If the organization later moves back to the Community Edition, it should plan for losing the Palomar design and the vendor support that came with Dovecot Pro, and it should replace clustered features with the shared filesystem and tooling the Community Edition supports. Ask the vendor whether it provides migration support in either direction. Done when the runbook, the support matrix and a written return-path assessment are filed with the platform owner.

Questions buyers ask before choosing Dovecot Pro or staying on Community

Can the free Dovecot Community Edition still scale without Director or the replicator?

Yes, for many mail platforms, but the scaling model changes. Dovecot 2.4 removed the replicator and Director architecture support from the Community Edition, and the upgrade guide tells users to rely on NFS or another shared filesystem for mailbox storage instead. Lua Director is named as a small-scale replacement that the project does not support. A single or lightly loaded server on shared storage can run without these components. The question to settle is how many IMAP nodes you need, how failover works when a node fails, and who carries the risk of an unsupported routing layer. If those answers depend on features Dovecot 2.4 removed, the Community path needs a design you can defend without vendor support.

What does Dovecot Pro cost, and how is it quoted?

Dovecot Pro publishes no prices on its home page, so you should ask for a written quote tied to a defined scope. Dovecot Pro is sold by a company that is part of Open-Xchange and is marketed for carrier and enterprise scale on the Palomar architecture, with dedicated vendor support, long-term support and proactive updates. Ask the vendor to itemize the license, the support tier, the number of nodes or mailboxes it covers, the term, and whether the price recurs annually. Your own costs sit beside the license: the hardware or cloud capacity for the cluster, shared storage, staff time for configuration, and monitoring. Compare the quoted total against what you would spend on staff time and on a self-maintained failover design under the Community Edition.

How long does a Dovecot migration take, and what drives the effort?

No duration is supplied for this migration, so treat any estimate you receive as a question for the vendor or implementer to justify. The main drivers are the number of mailboxes and total mailbox size, the number of active nodes, how your current replicator or Director setup must be retired, and whether you use full-text search. The upgrade guide says the dsync symlink was removed in favor of doveadm sync or doveadm backup, so scripts and runbooks that call the old name need updating. Full-text search plugins also changed: fts-lucene and fts-squat were removed in favor of fts-flatcurve or fts-solr, which means indexes may need rebuilding. Ask for a test migration on a copy of real data before committing to a cutover date.

What staff and infrastructure must the team provide?

Whichever path you choose, the team must provide shared storage that all IMAP nodes can reach, a monitoring stack, backup and restore procedures, TLS certificates, and a change process for upgrades. On the Community path, in-house engineers must also design and test failover, routing and search indexing, and keep those designs current with each release. Dovecot 2.4 requires you to verify your own replication and routing choices because the replicator and Director were removed from the free edition. Pro moves much of the cluster design question to the vendor, but you still provide the hosting, network, storage and the people who operate them. Write down the on-call owner for mail delivery before you start.

Can our own engineers do the Dovecot work without outside help?

Often yes, if your team already runs Linux mail services, shared storage and configuration management, and can read the 2.3 to 2.4 upgrade guide closely. The work is manageable for a small, single-site setup with a clear rollback plan. It is harder when you must redesign clustering, replace Director, or rebuild search indexes across many mailboxes at once. The skill gap usually shows up in failover testing and in migrations that must keep mail flowing during the cutover. Be honest about how many people can carry the pager, and whether the knowledge stays with one person. If the answer is one or two people, plan for a documented runbook and a support path before you move.

When should we hire outside help for a Dovecot migration?

Hire outside help when the design decisions carry more risk than your team can absorb in-house. Good triggers include a move from replicator or Director to a shared-storage design, a full-text search rebuild across a large mailbox store, a migration where mail must stay available throughout, or a compliance review that requires documented controls. DeployOpen plans, implements, hardens, backs up, upgrades and documents self-hosted platforms inside your own infrastructure, and most engagements are fixed-scope with scope, deliverables and timelines agreed in writing before work starts. Ask any implementer for a written scope that names the migration steps, the test plan, the rollback criteria and the handover. DeployOpen does not publish a price list, so the quote follows from that scope.

Which Dovecot release should we plan around today?

Plan around the current Dovecot Community Edition 2.4 line rather than the 2.3 configuration you may have. Dovecot Community Edition 2.4.5 was published on August 28, 2026, according to the Dovecot releases page on GitHub, so check that page for newer tags before you pin a version. Confirm your build of each plugin, because the removals in 2.4 affect replication, Director, search and dsync. Dovecot Pro release timing and support windows are not supplied here, so ask the vendor for its current support terms in writing. Document the version you test against, and repeat the test when you upgrade.

Where to confirm edition details before you decide

This sequence checks what the free Dovecot release has dropped, which version is current, what the license allows, and what Dovecot Pro includes. The output is a written record of confirmed facts and open questions that a quote can be measured against.

  1. Review removed features in the upgrade guide

    The mail engineer responsible for IMAP reads the Dovecot 2.3 to 2.4 upgrade guide line by line against the current configuration. Check every use of the replicator, Director, fts-lucene, fts-squat and the dsync symlink, and note the replacement the guide names for each. Done means a written list that maps each affected setting to its replacement, with any setting that has no replacement flagged for the architecture review.

  2. Confirm the current Community Edition release

    The platform lead checks the dovecot/core releases page to confirm which Community Edition version is the newest. The researched record shows Dovecot Community Edition 2.4.5 published on August 28, 2026, so confirm whether a later release has appeared since then. Done means the target version is recorded with its publication date, and the team knows which release notes to read before any upgrade.

  3. Check license terms in the COPYING file

    Legal or compliance staff read the COPYING file in the dovecot/core repository to confirm the license split. The file places the src/lib, src/auth and src/lib-sql code under MIT and the remaining code under LGPLv2.1 unless a file says otherwise. Confirm how this applies if you modify or redistribute Dovecot inside your own service packages. Done means a short memo states the license for each component you ship and names any files that need a separate review.

  4. Compare Dovecot Pro scope on its site

    The procurement lead and platform owner review the Dovecot Pro site to identify what is offered beyond the Community Edition. The site describes a highly available, cluster-ready Palomar architecture, dedicated vendor support, long-term support and proactive updates. The home page publishes no prices, so note every feature claim as something to verify in writing. Done means a feature list with a column for each claim marked as confirmed, unconfirmed or excluded from the offer.

  5. Test replacement components in a lab

    The mail operations team builds a non-production environment that uses the replacement components named in the upgrade guide, such as shared storage for replication, fts-flatcurve or fts-solr for search, and doveadm sync or doveadm backup for data movement. Measure failover behavior, search results and mailbox migration on a copy of realistic but non-production data. Done means a signed test report lists which replacements met your requirements and which gaps remain.

  6. Get scope and license terms in writing

    The decision owner requests a written quote and a scope document from Dovecot Pro, using the confirmed and unconfirmed items from earlier steps as the checklist. Ask for the included features, support hours and response commitments, long-term support terms, license conditions and any items billed separately. Done means the vendor's written answers are filed with the architecture report, and no decision is recorded until each open item has a documented answer.

How DeployOpen scopes and delivers Dovecot work

DeployOpen plans, implements, customizes, integrates, hardens, backs up, upgrades, documents and supports self-hosted open-source platforms inside the client's own infrastructure. For Dovecot Community Edition vs Dovecot Pro, we start from your current IMAP load, storage layout and mail flow, then agree in writing which edition and architecture fit that environment.

How we scope

  • Engagements are fixed-scope, with scope, deliverables and timelines agreed in writing before work starts.
  • The written scope lists current mailbox volumes, storage backend, replication needs and the Dovecot version you run today.
  • Scope also records whether a Dovecot Pro license, vendor support terms or a Community Edition design is the chosen path.

How we build

  • We plan the storage and failover design around the shared filesystem or cluster approach your chosen edition requires.
  • Full-text search, backup and sync tooling are configured against the components supported by your edition.
  • Testing covers mailbox migration rehearsals, failover behavior and client access before any cutover is scheduled.

How we hand over

  • Handover includes architecture documentation, configuration records and runbooks for routine and failure-case operations.
  • Backup and restore steps are documented and tested so your team can confirm recovery before go-live.
  • Evidence for compliance assessments is prepared, though independent auditors and certification bodies issue any reports.

How we support

  • Ongoing support, upgrades and continuous testing are available as retainers, scoped separately from the original engagement.
  • Upgrade planning covers major Dovecot changes, including the 2.3 to 2.4 transition, before any production change.
  • Ask for the support scope, response commitments and upgrade responsibilities in writing as part of any quote.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.