How do services in pfSense know which GW to use?

ddbnj

I think this is a basic question which I can't answer.

I have WAN (Fios) and WAN_LTE (t-mobile). I have wireguard site to site to another pfsense box with WAN and WAN LTE as well.

How does wireguard know to send out of WAN and not WAN_LTE? My default GW is none and I use policy based routing. I don't have any static routes.

With openvpn, you can specify an outgoing interface.

For that matter, how does pfsense itself know when it searches for pfsense updates, which WAN to use?

Thanks for answering this dumb question.

-Devan

ddbnj

@ddbnj

My route table:

default xxx.xx.xx.1 UGS 21973596 1500 ix3

even though default gateway is set to none.

I guess the other way to ask this is how can I pick the outgoing interface of the firewall itself?

trumee

@ddbnj said in How do services in pfSense know which GW to use?:

I guess the other way to ask this is how can I pick the outgoing interface of the firewall itself?

The specified default gateway is used by the firewall itself. You should change it from None to some other value to see the effect.

ddbnj

@trumee

Thank you explaining. I figured out a workaround by creating a static route to host addresses I can direct the wireguard service separately from the rest of pfsense.