An apparatus for communication between a partner network and a service hosted in a wide-area network, WAN, connected to the partner network via an Internet, wherein the apparatus is a software defined wide area networking, SD-WAN, appliance within the partner network, and the partner network is a computer network that connects to the WAN via the Internet, the apparatus comprising: a memory storing one or more instructions for managing routing for the partner network; and at least one processor coupled to the memory and configured to execute the instructions, wherein the at least one processor is configured to: measure a plurality of paths from the partner network to the service within the WAN to generate a measurement for each of the plurality of paths, wherein each of the plurality of paths (260, 262) is associated with one of a plurality of front-end devices of the WAN that are associated with respective unicast border gateway protocol address prefixes, and wherein the measurements include at least one of latency, delay, throughput, devices traversed, and a trace route indicating one or more networks between the partner network and the WAN; provide, to the WAN, the measurements of the plurality of paths to the service; receive, from the WAN, a routing rule specifying a unicast address prefix for a selected front-end device of the plurality of front-end devices of the WAN, wherein the selected front-end device is associated with a path of the plurality of paths that the WAN has identified as having better characteristics based on the measurements provided by the SD-WAN appliance; and forward data packets for the service to the respective border gateway protocol address prefix of the selected device via the Internet. a memory storing one or more instructions for managing routing for the partner network; and at least one processor coupled to the memory and configured to execute the instructions, wherein the at least one processor is configured to: measure a plurality of paths from the partner network to the service within the WAN to generate a measurement for each of the plurality of paths, wherein each of the plurality of paths (260, 262) is associated with one of a plurality of front-end devices of the WAN that are associated with respective unicast border gateway protocol address prefixes, and wherein the measurements include at least one of latency, delay, throughput, devices traversed, and a trace route indicating one or more networks between the partner network and the WAN; provide, to the WAN, the measurements of the plurality of paths to the service; receive, from the WAN, a routing rule specifying a unicast address prefix for a selected front-end device of the plurality of front-end devices of the WAN, wherein the selected front-end device is associated with a path of the plurality of paths that the WAN has identified as having better characteristics based on the measurements provided by the SD-WAN appliance; and forward data packets for the service to the respective border gateway protocol address prefix of the selected device via the Internet. measure a plurality of paths from the partner network to the service within the WAN to generate a measurement for each of the plurality of paths, wherein each of the plurality of paths (260, 262) is associated with one of a plurality of front-end devices of the WAN that are associated with respective unicast border gateway protocol address prefixes, and wherein the measurements include at least one of latency, delay, throughput, devices traversed, and a trace route indicating one or more networks between the partner network and the WAN; provide, to the WAN, the measurements of the plurality of paths to the service; receive, from the WAN, a routing rule specifying a unicast address prefix for a selected front-end device of the plurality of front-end devices of the WAN, wherein the selected front-end device is associated with a path of the plurality of paths that the WAN has identified as having better characteristics based on the measurements provided by the SD-WAN appliance; and forward data packets for the service to the respective border gateway protocol address prefix of the selected device via the Internet.