流光聲色-紛亂的年代

There are two modes of traffic shaping, INGRESS and EGRESS. INGRESS handles incoming traffic and EGRESS outgoing traffic. Linux does not support shaping/queuing on INGRESS, but only policing. Therefore IFB exists, which we can attach to the INGRESS queue while we can add any normal queuing like FQ_CODEL as EGRESS queue on the IFB device.
...
The INGRESS shaping below works like this:
1. Create ingress filter on external interface
2. Copy all incoming data to the IFB device
3. Create an EGRESS qdisc on the IFB device and limit the bandwidth to 90%
4. Attach the FQ_CODEL queuing discipline.

Rate Limiting queue can be checked as below:
root #tc qdisc show dev eth0
root #tc -s qdisc show dev eth0