If I recall choosing a monitor IP such as 8.8.8.8 isn’t advised on multi WAN setups as it creates a static route underneath, thus all traffic for 8.8.8.8 would always use that route?
Just re-doing multi WAN setup as I’ve got a 4G backup for a couple of particuar devices, but pfsense / something is consuming the data allowance.
Nothing in the logs, state table shows DNS requests etc.
I would install Ntopng and you’ll be able to see how much data per devices is consuming all the data.
Had a bit a look at that last week, need to delve into it more.
Only traffic is ICMP / DNS traffic, packet capture this morning only shows ICMP/DNS again.
Will have a look further - re-look at what I’ve done / look at Tom’s video again.
Running Unbound DNS with TLS on upstream DNS servers