Skip to main content
BlobRouter v0.1 · Last updated: August 2026 · Architecture version: 2.0
BlobRouter is a cloud optimization platform whose first capability is storage cost optimization. Storage is the entry point because access patterns are measurable, trust required is low, and savings show up quickly. It is not “just a storage SDK.” The SDK is one way to keep optimizing after the free audit.

​
Two entry points

​
1. Free — AWS S3 cost audit

Connect a read-only IAM role → BlobRouter scans your buckets → you see waste and recommendations. Nothing changes until you approve it.

​
2. Paid — Migration + smart router

Approve migrations (never automatic) → cold objects move to cheaper storage, hot objects toward R2 → new uploads via the SDK go to the cheapest suitable provider.

​
Two credential models

Never confuse these: Scanner credentials are never long-lived AWS access keys. Router credentials are decrypted only in Worker memory when generating presigned URLs.

​
Product flow

​
Invariants

  • No byte proxying — files go client → provider via presigned URLs
  • Client-owned storage — we never host object bytes
  • Scanner is read-only — zero write permissions on the audit role
  • No auto-remediation — migrations require explicit approval
  • Deterministic routing in v1 — cost formula + priority rules, not ML

​
Architecture sketch

See Architecture for upload, scan, and migration flows in detail.