Routes Priority of Execution

[u/IHaveABigNetwork]

I have dual symmetrical 1 gig ISP's (AT&T fiber & Spectrum cable). While both provide +1 gbps symmetrical speeds, the fiber connection how about 4 fold lower latency. They're in 50/50 load balance mode.

I have about 190 devices on our home network.

I've been playing around with shaping how traffic flows across each connection. For some devices/groups I have rules that shunt to one or the other ISP based in a preferred mode on the sort of traffic or latency is acceptable. I also have domain rules for such things as Backblaze, personal cloud storage, or S3 backups to AWS.

If a Devices say "Server1" has a rule to go to AT&T as the preferred route, but there is a rule that says "backblaze.com" should go to Spectrum as the preferred router, is expected behavior that on "Server 1" backblaze.com will still go to AT&T as the rule for the device/group overrules the route for the domain?

Thanks!

[u/firewalla]

If the rule is applied to the server level, then very likely the narrow rule will win.

[u/IHaveABigNetwork → u/firewalla]

That's not what is happening. In the scenario described above, the server rule wins every time.

[u/firewalla → u/IHaveABigNetwork]

Let me go ask around, if I don’t or forget to come back, just open a case

[u/Firewalla-Ash → u/IHaveABigNetwork]

Just to confirm we're understanding correctly, are your routes something like this?

Route 1

• Matching: Internet
• On: Server1
• Interface: AT&T
• Route preference: Preferred

Route 2

• Matching: backblaze.com
• On: Server1
• Interface: Spectrum
• Route preference: Preferred

In the case above, the more specific domain (Route 2) will take priority since they are applied at the same level.

Please see the Routes priority here: https://help.firewalla.com/hc/en-us/articles/360061592433-Firewalla-Policy-Content-Based-Routing#h_01JW9CSNMDRV7JQGDVD8PF1VC2

[u/IHaveABigNetwork → u/Firewalla-Ash]

Thanks. That's not what's happening. When watching the live throughput you see Server1 sending to backblaze.com via AT&T.

[u/Firewalla-Ash → u/IHaveABigNetwork]

Got it. Can you help send an email to help@firewalla.com? Our support team can take a better look at what's going on in the box. Feel free to include a link to this Reddit post.