hi, i would like to use just one interface to shape/police traffic, lets have following config : users -----[eth1]===[eth0]------ Internet what I think to do is : $m1 = SLB(cir 20kbps, cbs 10kB); dev eth1 { ingress{ class(<$i1>) if ip_dst = 192.168.0.5 && SLB_else_drop($m1); class(<$i2>) if ip_dst = 192.168.0.5 && SLB_else_drop($m1); drop if 1; } egress { class(<$c1>) if ip_dst = 192.168.0.5; class(<$c2>) if ip_dst = 192.168.0.6; ...... drop if 1; htb() { $c1 = class(rate 20kbps, rq2 1) {sfq;}; $c2 = class(rate 100kbps, rq2 10) {sfq;}; } } } My main question is about INGRESS.. I see in the docs there is many other metering primitives and can't find which one is better to use.. From what I know it is not possible to shape traffic on ingress interface.. What about this instead of SLB: $m1 = bucket(rate 20kbps, burst 10kB); class(<$i1>) if ip_dst = 192.168.0.5 && conform $m1; what is the difference..