GRE tunnel - how does Zscaler route back?

I’ve noticed that, when provisioning a new GRE tunnel in the Zscaler cloud, I never need to insert my local private subnets. How does Zscaler know how to route traffic back to my internal network?

ZIA uses Direct Server Return to send the response traffic to the same tunnel the request traffic came to us over.

1 Like