Split traffic between WAN links based on type of traffic not source IP
-
Just moved into a new house and waiting on internet being installed and its being quoted at around 25-30Mb, so in the meantime I have a 4G router which I am getting around 80-90Mb on but have around 50ms latency so not great for gaming.
My question is, if I have both my 4G and broadband as separate WAN links configured in pfSense, can I then split traffic between the WAN links based on either traffic type or destinations if possible.
So my PC would be on eg 10.99.1.10 and I go to Youtube the traffic will go out via the faster 4G connection, however if I am playing games such as World of Warcraft it will send the traffic out the normal broadband connection, so get improved pings but lower speed.
I know you can do it based on source IP address so I can put my servers to go via the 4G connection, but not sure if it can be done on a specific type of traffic.
Thanks
-
Its a firewall rule - anything you can define in the rule can be used to policy route. Be that source IP, destination IP, protocol, port.
If the rule triggers, then it can send it down a specific gateway be that your wan or your 4g connection.
-
@johnpoz Thanks for that, will have a look once I get my pfSense box back online from moving, would appear Blizzard list all their ports, so guessing can do it based on that.
-
As long as nothing else uses that port, you can tie destion IP or Range/Netblock with that port.
Kind of problematic if they use say 443 or 80 or any other port that some other site/service will use. So you need to use enough variables to only route that specific traffic and not traffic you don't want to go out that gateway.
Why source IP is used - is it simple that if that changes its completely under your control. Problem with destination IP is most stuff is served via some sort of CDN these days, and IPs used could be in the 1000's or 10's of thousands - and they can change all the time.
Same with port, they are not always unique to whatever site/service you would want to route out a specific gateway.
While you know your source IP is what you set it to be, and won't be changing unless you change it.
But any combination you can come up with that makes the traffic unique enough to identify can be used.