You can install an ingress queue and apply a filter to inbound traffic. There are few other more arcane techniques but you're right that control is quite limite

You can install an ingress queue and apply a filter to inbound traffic. There are few other more arcane techniques but you're right that control is quite limited. Here's an example for something I was working on yesterday (traffic policing to simulate slow download): sudo tc qdisc add dev eth0 handle ffff: ingress sudo tc filter add dev etch0 parent ffff: protocol ip prio 50 u32 match ip src 0.0.0.0/0 police rate 30kbit burst 3k drop flowid :1 Here's an example of using IFB to shape incoming traffic (what the OP was referencing): http://serverfault.com/a/386791/301799 http://serverfault.com/a/386791/301799