Linux Transparent Proxy as Gateway for domain based routing
-
Hi all,
I'm trying to get some feedback on my current setup since I am having issues when it comes to gaming.
In order to policy route traffic between my WAN and VPN I have setup a Linux server on a VLAN running a transparent TCP/UDP proxy that is able to do SNI inspection (eg. using V2Ray or Clash). In this way I am able to route traffic by domain names. I avoided doing this on pfSense itself since support for these SNI applications is better on Linux.
So far my current setup is working correctly for all web traffic. For example, I can confirm that sites are being proxied correctly according to my rules.
However, I seem to be having issues most likely related to NAT-ing and more specifically UDP. I have setup both the desktop (ie. "desktop1") and the proxy gateway (ie. "gw") with a static ports in the Outbound NAT, but still games do not connect (eg. I have tested Red Dead Redemption II and Tony Hawk's Pro Skater 1+2).
Does anyone have any recommendations as to how to resolve this issue?