Mikrotik: Is routing based on layer-7 possible?

Question

Mikrotik

I'll make a reservation right away, it's not worth suggesting routing by "Address List", it already works, but I want comfort.
Let me explain, I want to put in layer-7 a list of regular expressions fqdn resources on the Internet that are carefully blocked by my provider by order of you know who, and so that the packets themselves go into the tunnel based on this.
If anyone has implemented it, please share, of course I have vague doubts and I can admit that what was conceived is not feasible, but this, due to the lack of the necessary knowledge, can neither be proved nor refuted.
PS
In extreme cases, there is an idea about the workaround, in the same VPN server, resolve all possible IPs belonging to the list of hosts and take them to Mikrotik in the Address List automatically. But I would like to do everything on Mikrotik, without unnecessary gestures.
Thanks in advance.

Answer 1

Yes possible - Manual:IP/Firewall/L7 - MikroTik Wiki
Windows telemetry blocking example:

/ip firewall layer7-protocol
add name="Windows Telemetry" regexp="^.+(data.microsoft.com|telemetry.microsoft.com).*\$"
/ip firewall filter
add action=reject chain=forward comment="Layer7 Protocol WINDOWS Telemetry" in-interface=bridge layer7-protocol="Windows Telemetry" protocol=tcp reject-with=tcp-reset
add action=reject chain=forward layer7-protocol="Windows Telemetry" out-interface=bridge protocol=tcp reject-with=tcp-reset

How to Block torrent 100 %
How to Block torrent 100%? Only 2 lines. It is solved.

Answer 2

Looks like I found an approximate answer to my question here. Knowledge is really not enough, I'll try to search and experiment.

Answer 3

• There are already more than 16k urls in the block list.
  I suggest you consider another option for routing closed resources.
  For example, resolve the ip of all hosts, combine them into subnets and import these subnets for routing in Mikrotik.
  The router has ftp, so you can take the complex logic out of it and upload the resulting file to the router for cron feeding.
  You don't need routing of one page like ya.ru/1.html through VPN and ya.ru/2.html through your ISP? This would be incredibly wasteful in terms of CPU resources.