OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: Raptcha on December 19, 2023, 11:55:51 PM

Title: Use Zenarmor for Selective Routing
Post by: Raptcha on December 19, 2023, 11:55:51 PM
Hello,

I have a wireguard client instance running on my OPNSense which I'm using to route my home network traffic through a private cloud VPS where I'm running the wireguard server instance. All though I would love to route all traffic through the wireguard tunnel, some websites and services just don't play well with any VPN encryption on the packets. I'm specifically trying to mitigate issues I've been having with some media streaming services and banking websites. Its very difficult to setup selective routing for media streaming services especially due to their vast collection of IPs that are ever changing.

Zenarmor does a pretty good job of identifying media streaming traffic and lets me block or allow it. I was just wondering if there is a way to use Zenarmor's ability to identify media streaming traffic, but instead of just blocking/allowing it, use it to route those packets through a tunnel/interface of my choice. Is this possible?

Thanks
Title: Re: Use Zenarmor for Selective Routing
Post by: sy on December 20, 2023, 08:10:06 AM
Hi,

Zenarmor just terminate or allow the inspected sessions yet. To forward decrypted traffic via TLS inspection to IPS tool is in our roadmap, but any custom route is not planned yet.
Title: Re: Use Zenarmor for Selective Routing
Post by: Raptcha on December 21, 2023, 05:23:49 PM
Hey Sy,

How does Zenarmor reliably track media streaming traffic like Netflix, Prime Video etc?
If its not too complicated, perhaps I could try to do something similar using Alias or something for my needs.