topic Re: Forward Youtube and Facebook traffic to specific WAN interface in General Topics

Forward Youtube and Facebook traffic to specific WAN interface

LocBaoNguyen — Wed, 24 Jan 2018 14:29:58 GMT

Hi all,

There are any ways can be redirected or forward (use PBF) youtube and facebook traffic to secondary ISP (if we are running with dual ISPs)?

Thanks all!

Re: Forward Youtube and Facebook traffic to specific WAN interface

Brandon_Wertz — Wed, 24 Jan 2018 14:54:34 GMT

As an aside what you're asking to do principally is what the current industry is hyped up about..."Hybrid networking / SD WAN / iWAN"

Basically routing applications on specific network links (MPLS / IPSec over DIA or MPLS / DIA ( Direct Internet Access))

I've been begging Palo for years to get into the "hybrid space." They haven't seemed very interested in marketing their product to fit this use case.

Re: Forward Youtube and Facebook traffic to specific WAN interface

LocBaoNguyen — Wed, 24 Jan 2018 15:01:50 GMT

Actually, we can do this based on PBF but it has been solved for a few specific URL or IP address, it's not enough for youtube and facebook (with many thing we need to catch up)

Re: Forward Youtube and Facebook traffic to specific WAN interface

Brandon_Wertz — Wed, 24 Jan 2018 18:59:00 GMT

@LocBaoNguyen wrote:
Actually, we can do this based on PBF but it has been solved for a few specific URL or IP address, it's not enough for youtube and facebook (with many thing we need to catch up)

I never said it can't do it. I said they don't market it as such. Their direction has been more of a "security" play vice an "application" routing appliance.

Re: Forward Youtube and Facebook traffic to specific WAN interface

LocBaoNguyen — Thu, 25 Jan 2018 02:35:28 GMT

Yup, I got your point. I have tried with PBF by using FQDN - DNS Proxy but I'm facing with an issue (I don't know this is affected by my wrong configuration or this is a bug on PaloAlto).

Ex: I have 2 WAN interfaces (ISP1 and ISP2)

- The primary interface is ISP 1, and I want youtube and facebook traffic will be forwarded to ISP2 interface.

- I tried to nslookup URL youtube.com to an IP address, and I got 20.20.20.20 on PaloAlto.

- Then I tried to nslookup URL yotube.com to an IP adress and I got the same IP: 20.20.20.20 on User machine.

- Meaning, If the traffic from User machine access to youtube.com, the PBF feature must be forward this traffic to ISP2 interface, but it's not.

Do you have any experience for that one? @Brandon_Wertz