In my world, it's inbound shaping that's the biggest problem, and my dream has long been to somehow have a way to do: tc qdisc add dev eth0 ingress cake bandwidth 800mbit and that be able to work across multiple cores, without act_mirred, without any filter magic. Getting there via ebpf as in https://github.com/rchac/LibreQoS is working for ISPs (plea, anyone got time to make ipv6 work there?), but it's running out of cpu for inbound shaping on the current act_mirred path we use that's killing us.