Netflix outbound policy - Any Improvements?

The last time I looked we couldn’t manage the routing of Netflix traffic.
Has this situation changed in the meantime?

I see that my balance knows which sessions are for Netflix but I still don’t have a way to block it for force it onto a specific WAN is that right?

I used domain rules for

nflximg.net
nflxext.com

But I haven’t really given those rules a test in the past year.

The problem with the Identification in the outbound traffic is that tracking is probably based upon the TLS certificate presented in the stream. By the time that information is picked up you could terminate a connection but TCP is already negotiated, so you can’t then switch the outbound WAN etc. (or it would be very tough)