SD-WAN Load Balancing Behaviour

[nanukanu]

Hi, 

I am doing an SD-WAN deployment, which consists of IPsec plus BGP tunnels. Topology HUB and SPOKE with redundant paths between them.

The device that acts as HUB propagates through eBGP a series of routes to the spokes, these have redundant paths against the HUB, so they learn the same route through two tunnels (multipath bgp).

The security rules are pointing to the sd-wan interfaces. But the routes are learned via Tunnel interfaces.

The problem is that the traffic from the spokes do not use the sd-wan interface to reach the networks propagated by the HUB, but instead they use the tunnel interfaces directly, which does not apply the rolling method offered by SD WAN (volume, session, spillover ...).

Any suggestion for this behaviour?