Our Android XMPP client yaxim was created in 2009. A decade later, we celebrated its round birthday. To make the user experience more straightforward, we launched the yax.im public XMPP service in November 2013, to become the default server in yaxim. Now, ten years later, it’s time to recap and to upgrade the hosting infrastructure.
We will migrate the server from the old infrastructure to the new one, on
Thursday, November 30th, between 8:00 and 11:00 UTC. Please expect a few hours
of downtime until everything is settled!
The migration will also include an upgrade to prosody 0.12 and
deactivation of TLS v1.0 and v1.1 in favor of TLS v1.3.
- The migration has been completed at 9:00 UTC.
- We have re-enabled TLS v1 and v1.1, as those are still in active use.
- We have removed offline messages archives for accounts with no activity in the last year.
Ten years review
We started the service on Debian Squeeze with the freshly released Prosody 0.9 on it. Since then, there were quite a few upgrades of both the OS and of prosody. However, for technical reasons, the server is currently running on a prosody development snapshot that predates the current 0.12 major update.
In that time we’ve grown significantly, and are currently processing on average 100 thousand messages and 6.3 million presence stanzas every day.
Back in 2013, we were quite avantgarde to support not only TLSv1.0, but also v1.1 and v1.2. The support was only added into Android with the 4.1 release in 2012 and wasn’t enabled by default until 2014 with Android 5. Now we are lagging behind, given that TLS v1.3 came with Android 10 four years ago.
These were never officially announced and have just a few users. They will be migrated to the new host as well, but with a lower priority.
Spam fighting efforts
The XMPP spam problem has been a significant annoyance to most users. We have the opinion that XMPP spam can be best fought at the server level, where aggregate views and statistics are available, and spam can be blocked centrally for all users with mod_firewall.
In 2017, we have implemented spam detection and prevention both for yax.im users and against spam bots registered on our server. In 2020, we extended that to auto-quarantine suspicious account creations.
In the last two weeks, our spam fighting efforts have blocked 21.000 spam messages from 7.600 accounts on 72 servers, including 480 auto-flagged bot accounts on yax.im. We were not explicitly keepig note, but the number of auto-flagged accounts since the measure was introduced in 2020 is around 30.000.
As part of the JabberSPAM initiative, we have helped report abuse and bring down unmaintained spam relays.
With the new hosting platform and our committed team of three administrators, we are ready to take on the challenges of the future and to sustain the growth of our user base.