Forward Youtube and Facebook traffic to specific WAN interface

[LocBaoNguyen]

Hi all,

There are any ways can be redirected or forward (use PBF) youtube and facebook traffic to secondary ISP (if we are running with dual ISPs)?

Thanks all!

[Brandon_Wertz]

As an aside what you're asking to do principally is what the current industry is hyped up about..."Hybrid networking / SD WAN / iWAN"

Basically routing applications on specific network links (MPLS / IPSec over DIA or MPLS / DIA ( Direct Internet Access))

I've been begging Palo for years to get into the "hybrid space."  They haven't seemed very interested in marketing their product to fit this use case.

[LocBaoNguyen]

Actually, we can do this based on PBF but it has been solved for a few specific URL or IP address, it's not enough for youtube and facebook (with many thing we need to catch up)

[Brandon_Wertz]

---

@LocBaoNguyen wrote:

Actually, we can do this based on PBF but it has been solved for a few specific URL or IP address, it's not enough for youtube and facebook (with many thing we need to catch up)

---

I never said it can't do it.  I said they don't market it as such.  Their direction has been more of a "security" play vice an "application" routing appliance. 

[LocBaoNguyen]

Yup, I got your point. I have tried with PBF by using FQDN - DNS Proxy but I'm facing with an issue (I don't know this is affected by my wrong configuration or this is a bug on PaloAlto).

Ex: I have 2 WAN interfaces (ISP1 and ISP2)

- The primary interface is ISP 1, and I want youtube and facebook traffic will be forwarded to ISP2 interface.

- I tried to nslookup URL youtube.com to an IP address, and I got 20.20.20.20 on PaloAlto.

- Then I tried to nslookup URL yotube.com to an IP adress and I got the same IP: 20.20.20.20 on User machine.

- Meaning, If the traffic from User machine access to youtube.com, the PBF feature must be forward this traffic to ISP2 interface, but it's not.

Do you have any experience for that one? @Brandon_Wertz