Splitting Traffic by domain/service NOT by IP for Hangouts, etc. ?

[jfredle 0]

Hey everyone, I'm on a Mac using Tunnelblick or Viscosity. Eddie sucks for me (i love airVPN tho!) because it always hangs up and chokes the internet everytime the mac sleeps when it's connected. 

 

Anyways, I'm looking for a way to filter video traffic like Google Hangouts, Skype, etc. from AirVPN, both to help save vpn server resources and because I've had a few hangouts choke up on a relatively empty server. At least Hangouts does not use specific IP addresses and recommends against IP range filtering for network optimization. It seems like all VPN splitting solutions are IP based. Viscosity has a nice routing feature that helps you add IPs to either force over the VPN or not, but it's all IP based.

 

Any help is appreciated. I looked for a while online and in the forums and could not find this topic. 

 

From:

https://support.google.com/a/answer/1279090?hl=en

 

"Don’t filter Google traffic or apply Quality of Service (QoS)-based URLs and IPs. If filtering is required, use a proxy .pac file containing current Google service URLs and Google IP addresses (both subject to change without warning) is recommended.

We don’t maintain a list of URLs and IPs explicitly used for video calls, because they may change at any time. Google URLs and IPs are pooled resources that can be re-allocated to different Google services without notice. "

 

From the Chrome Connectivity Diagnostic:

 

Hangouts blocked test returns a no problem verdict if: (1) a connection can be established to stun.l.google.com on any UDP port from 19302 to 19309 (2) A TCP connection can be established to apis.google.com, clients6.google.com, plus.google.com, and talkgadget.google.com

Hangouts blocked test returns a problem verdict if: (1) all UDP destination ports from 19302 to 19309 are blocked for stun.l.google.com (2) A TCP connection to any of the following hosts fails on port 443: apis.google.com, clients6.google.com, plus.google.com, talkgadget.google.com

 

[zhang888 1065]

You will then have to route all Google's IPs outside of the tunnel, since those servers have thousands of them.

Not something recommended to do, but you can start from this list:

http://bgp.he.net/AS15169#_prefixes

[jfredle 0]

thanks for the list.  Unfortunately I'm having the same problem with gotomeeting and other services.  

 

Ideally i'd be able to identify the connection as audio or video (by ports) and route those outside the vpn.