ok networking folks. how scared should I be of using policy based forwarding? palo seems to be discouraging it heavily (in favor of prisma), but I'm under the assumption that if I scope it right (large IP blocks with simple pbf policies) pbf shouldn't be thattt bad?
Palo seemed to imply pbf shouldn't be used for any greenfield deployment?
(for context I'm building a custom sd-wan solution to replace mpls over gre due to unsolved mtu issues lol)
EmZaid 🫥
npub1vk…hjy73
2026-10-26 17:57:25 UTC
Author Public Key
npub1vk8lr3te0jmmup6n0ugw9vl0ay6mfc25z947gwn7ak40ux3m428sahjy73Seen on
wss://relay.momostr.pinkPublished at
2026-10-26 17:57:25 UTCEvent JSON
{
"id": "f144b827736ba88929b980f5195ab5d78019e1a5c8954dd1775d0ce0b3495c13",
"pubkey": "658ff1c5797cb7be07537f10e2b3efe935b4e154116be43a7eedaafe1a3baa8f",
"created_at": 1793037445,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@EmZaid/117508502009718003",
"web"
],
[
"proxy",
"https://infosec.exchange/users/EmZaid/statuses/117508502009718003",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/EmZaid/statuses/117508502009718003",
"pink.momostr"
],
[
"-"
]
],
"content": "ok networking folks. how scared should I be of using policy based forwarding? palo seems to be discouraging it heavily (in favor of prisma), but I'm under the assumption that if I scope it right (large IP blocks with simple pbf policies) pbf shouldn't be thattt bad? \n\nPalo seemed to imply pbf shouldn't be used for any greenfield deployment?\n\n(for context I'm building a custom sd-wan solution to replace mpls over gre due to unsolved mtu issues lol)",
"sig": "27b071ee145e4e0ea01446ec3eb0931ec782437d2c70957293f2a1c379881b5074fc6f41390518d5163eac51b612e0f67eb3fbad5b0e8f2b1117e12bb86da694"
}