{"id":110843,"date":"2024-02-08T08:29:06","date_gmt":"2024-02-08T16:29:06","guid":{"rendered":"https:\/\/www.backblaze.com\/blog\/?p=110843"},"modified":"2026-01-28T13:53:01","modified_gmt":"2026-01-28T21:53:01","slug":"backblaze-commits-to-routing-security-with-manrs-participation","status":"publish","type":"post","link":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/","title":{"rendered":"Backblaze Commits to Routing Security With MANRS Participation"},"content":{"rendered":"\n
\"A<\/figure>\n\n\n\n
<\/div>\n\n\n\n

They say good manners are better than good looks. When it comes to being a good internet citizen, we have to agree. And when someone else tells you that you have good manners (or MANRS in this case), even better. <\/p>\n\n\n\n

If you hold your cloud partners to a higher standard, and if you think it\u2019s not asking too much that they make the internet a better, safer place for everyone, then you\u2019ll be happy to know that Backblaze is now recognized as a Mutually Agreed Norms for Routing Security (MANRS) participant (aka MANRS Compliant).\u00a0<\/p>\n\n\n\n

What Is MANRS?<\/h2>\n\n\n\n

MANRS is a global initiative with over 1,095 participants that are enacting network policies and controls to help reduce the most common routing threats. At a high level, we\u2019re setting up filters to check that network routing information we receive for peers is valid, ensuring that the networks we advertise to the greater internet are marked as owned by Backblaze, and making sure that data that gets out of our network is legitimate and can\u2019t be spoofed.<\/p>\n\n\n\n

You can view a full list of MANRS participants here<\/a>.<\/p>\n\n\n\n

What Our (Good) MANRS Mean For You<\/h2>\n\n\n\n

The biggest benefit for customers is that network traffic to and from Backblaze\u2019s connection points where we exchange traffic with our peering partners is more secure and more trustworthy. All of the changes that we\u2019ve implemented (which we get into below) are on our side\u2014so, no action is necessary from Backblaze partners or users\u2014and will be transparent for our customers. Our Network Engineering team has done the heavy lifting.\u00a0<\/p>\n\n\n\n

MANRS Actions<\/h2>\n\n\n\n

Backblaze falls under the MANRS category of CDN and Cloud Providers, and as such, we\u2019ve implemented solutions or processes for each of the five actions<\/a> stipulated by MANRS:<\/p>\n\n\n\n

    \n
  1. Prevent propagation of incorrect routing information:<\/strong> Ensure that traffic we receive is coming from known networks.<\/li>\n\n\n\n
  2. Prevent traffic of illegitimate source IP addresses:<\/strong> Prevent malicious traffic coming out of our network.<\/li>\n\n\n\n
  3. Facilitate global operational communication and coordination:<\/strong> Keep our records with 3rd party sites like Peeringdb.com<\/a> up to date as other operators use this to validate our connectivity details.<\/li>\n\n\n\n
  4. Facilitate validation of routing information on a global scale:<\/strong> Digitally sign our network objects using the Resource Public Key Infrastructure (RPKI) standard.<\/li>\n\n\n\n
  5. Encourage MANRS adoption:<\/strong> By telling the world, just like in this post!<\/li>\n<\/ol>\n\n\n\n

    Digging Deeper Into Filtering and RPKI<\/h2>\n\n\n\n

    Let\u2019s go over the filtering and RPKI<\/a> details, since they are very valuable to ensuring the security and validity of our network traffic.<\/p>\n\n\n\n

    Filtering: Sorting Out the Good Networks From the Bad<\/h3>\n\n\n\n

    One major action for MANRS compliance is to validate that the networks we receive from peers are valid. When we connect to other networks, we each tell each other about our networks in order to build a routing table that lets us know the optimal path to send traffic.<\/p>\n\n\n\n

    We can blindly trust what the other party is telling us, or we can reach out to an external source to validate. We\u2019ve implemented automated internal processes to help us apply these filters to our edge routers (the devices that connect us externally to other networks).<\/p>\n\n\n\n

    If you\u2019re a more visual learner, like me, here\u2019s a quick conversational bubble diagram of what we have in place.<\/p>\n\n\n

    \n
    \"\"<\/a>
    Externally verifying routing information we receive.<\/figcaption><\/figure>\n<\/div>\n\n\n
    <\/div>\n\n\n\n

    Every edge device that connects to an external peer now has validation steps to ensure that the networks we receive and use to send out traffic are valid. We have automated processes that periodically check and deploy for updates to any lists.<\/p>\n\n\n\n

    What Is RPKI?<\/h3>\n\n\n\n

    RPKI<\/a> is a public key infrastructure framework designed to secure the internet’s routing infrastructure, specifically the Border Gateway Protocol (BGP)<\/a>. RPKI provides a way to connect internet number resource information (such as IP addresses) to a trust anchor. In layman\u2019s terms, RPKI allows us, as a network operator, to securely identify whether other networks that interact with ours are legitimate or malicious.<\/p>\n\n\n\n

    RPKI: Signing Our Paperwork<\/h2>\n\n\n\n

    Much like going to a notary and validating a form, we can perform the same action digitally with the list of networks that we advertise to the greater internet. The RPKI framework allows us to stamp our networks as owned by us.<\/p>\n\n\n\n

    It also allows us to digitally sign records of our networks that we own, allowing external parties to confirm that the networks that they see from us are valid. If another party comes along and tries to claim to be us, by using RPKI our peering partner will deny using that network to send data to a false Backblaze network.<\/p>\n\n\n\n

    You can check the status of our RPKI signed route objects on the MANRS statistics website<\/a>.<\/p>\n\n\n\n

    What does the process of peering and advertising networks look like without RPKI validation?<\/p>\n\n\n

    \n
    \"A<\/a>
    Bad actor claiming to be a Backblaze network without RPKI validation.<\/figcaption><\/figure>\n<\/div>\n\n\n
    <\/div>\n\n\n\n

    Now, with RPKI, we\u2019ve dotted our I\u2019s and crossed our T\u2019s. A third party certificate holder serves as a validator for the digital certificates that we used to sign our network objects. If anyone else claims to be us, they will be marked as invalid and the peer will not accept the routing information, as you can see in the diagram below.<\/p>\n\n\n

    \n
    \"A
    With RPKI validation, the bad actor is denied the ability to claim to be a Backblaze network.<\/figcaption><\/figure>\n<\/div>\n\n\n
    <\/div>\n\n\n\n

    Mind Your MANRS<\/h2>\n\n\n\n

    Our first value as a company is to be fair and good. It reads: \u201cBe good. Trust is paramount. Build a good product. Charge fairly. Be open, honest, and accepting with customers and each other.\u201d Almost sounds like Emily Post wrote it\u2014that\u2019s why our MANRS participation fits right in with the way we do business. We believe in an open internet, and participating in MANRS is just one way that we can contribute to a community that is working towards good for all.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Backblaze is now a recognized Mutually Agreed Norms for Routing Security (MANRS) participant. What does that mean? Read on to find out. <\/p>\n","protected":false},"author":199,"featured_media":110847,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[7,434],"tags":[468,493],"class_list":["post-110843","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-storage","category-featured-1","tag-b2cloud","tag-networkstats","entry"],"acf":[],"yoast_head":"\nBackblaze Commits to Routing Security With MANRS Participation<\/title>\n<meta name=\"description\" content=\"Backblaze joins the MANRS initiative, enhancing internet security by implementing routing policies to ensure valid and trustworthy data exchanges.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Backblaze Commits to Routing Security With MANRS Participation\" \/>\n<meta property=\"og:description\" content=\"Backblaze joins the MANRS initiative, enhancing internet security by implementing routing policies to ensure valid and trustworthy data exchanges.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/\" \/>\n<meta property=\"og:site_name\" content=\"Backblaze Blog | Cloud Storage & Cloud Backup\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/backblaze\" \/>\n<meta property=\"article:published_time\" content=\"2024-02-08T16:29:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-28T21:53:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/02\/bb-bh-MANRS-Certification.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1440\" \/>\n\t<meta property=\"og:image:height\" content=\"820\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Brent Nowak\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@backblaze\" \/>\n<meta name=\"twitter:site\" content=\"@backblaze\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brent Nowak\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Backblaze Commits to Routing Security With MANRS Participation","description":"Backblaze joins the MANRS initiative, enhancing internet security by implementing routing policies to ensure valid and trustworthy data exchanges.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/","og_locale":"en_US","og_type":"article","og_title":"Backblaze Commits to Routing Security With MANRS Participation","og_description":"Backblaze joins the MANRS initiative, enhancing internet security by implementing routing policies to ensure valid and trustworthy data exchanges.","og_url":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/","og_site_name":"Backblaze Blog | Cloud Storage & Cloud Backup","article_publisher":"https:\/\/www.facebook.com\/backblaze","article_published_time":"2024-02-08T16:29:06+00:00","article_modified_time":"2026-01-28T21:53:01+00:00","og_image":[{"width":1440,"height":820,"url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/02\/bb-bh-MANRS-Certification.png","type":"image\/png"}],"author":"Brent Nowak","twitter_card":"summary_large_image","twitter_creator":"@backblaze","twitter_site":"@backblaze","twitter_misc":{"Written by":"Brent Nowak","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/#article","isPartOf":{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/"},"author":{"name":"Brent Nowak","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/person\/638f4d92c918d8f3f77afe8b2d2927da"},"headline":"Backblaze Commits to Routing Security With MANRS Participation","datePublished":"2024-02-08T16:29:06+00:00","dateModified":"2026-01-28T21:53:01+00:00","mainEntityOfPage":{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/"},"wordCount":990,"commentCount":0,"publisher":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/#primaryimage"},"thumbnailUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/02\/bb-bh-MANRS-Certification.png","keywords":["B2Cloud","NetworkStats"],"articleSection":["Cloud Storage","Featured"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/","url":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/","name":"Backblaze Commits to Routing Security With MANRS Participation","isPartOf":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/#primaryimage"},"image":{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/#primaryimage"},"thumbnailUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/02\/bb-bh-MANRS-Certification.png","datePublished":"2024-02-08T16:29:06+00:00","dateModified":"2026-01-28T21:53:01+00:00","description":"Backblaze joins the MANRS initiative, enhancing internet security by implementing routing policies to ensure valid and trustworthy data exchanges.","breadcrumb":{"@id":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/#primaryimage","url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/02\/bb-bh-MANRS-Certification.png","contentUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/02\/bb-bh-MANRS-Certification.png","width":1440,"height":820,"caption":"A decorative image displaying the MANRS logo."},{"@type":"BreadcrumbList","@id":"https:\/\/www.backblaze.com\/blog\/backblaze-commits-to-routing-security-with-manrs-participation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Backblaze Commits to Routing Security With MANRS Participation"}]},{"@type":"WebSite","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#website","url":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/","name":"Backblaze Cloud Solutions Blog","description":"Cloud Storage & Cloud Backup","publisher":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#organization","name":"Backblaze","url":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/www.backblaze.com\/blog\/wp-content\/uploads\/2017\/12\/backblaze_icon_transparent.png?fit=512%2C512&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.backblaze.com\/blog\/wp-content\/uploads\/2017\/12\/backblaze_icon_transparent.png?fit=512%2C512&ssl=1","width":512,"height":512,"caption":"Backblaze"},"image":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/backblaze","https:\/\/x.com\/backblaze","https:\/\/www.youtube.com\/user\/Backblaze","https:\/\/en.wikipedia.org\/wiki\/Backblaze"]},{"@type":"Person","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/person\/638f4d92c918d8f3f77afe8b2d2927da","name":"Brent Nowak","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/02\/Brent-Nowak_Author-Profile-300x300-1-150x150.jpg","url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/02\/Brent-Nowak_Author-Profile-300x300-1-150x150.jpg","contentUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/02\/Brent-Nowak_Author-Profile-300x300-1-150x150.jpg","caption":"Brent Nowak"},"description":"Brent Nowak is a Technical Lead Network Engineer at Backblaze helping to build and deliver easy to use cloud storage services. Previously he has worked in academia, scientific research, and finance, each of which taught him different skills around performance, security, and reliability in computer networking. Brent is always looking for a new challenge to keep the lights blinking on network equipment (and to make them blink faster).","url":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/author\/brentnowak\/"}]}},"jetpack_featured_media_url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2024\/02\/bb-bh-MANRS-Certification.png","_links":{"self":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts\/110843","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/users\/199"}],"replies":[{"embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/comments?post=110843"}],"version-history":[{"count":0,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts\/110843\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/media\/110847"}],"wp:attachment":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/media?parent=110843"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/categories?post=110843"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/tags?post=110843"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}