How to shape ingress in linux?

Question

linux

Hello! I know that there is a way to limit using police in tc or to shape it normally using a redirect to ifbX (ifb0, for example). But if you need to shape (limit) traffic from a large number of devices, then it would be more correct to create a lot of ifbX (for example, 3000 pcs; modprobe numifbs=3000). But it somehow looks strange and the server is loaded because of this for 5-8 minutes. Limiting with police has a problem when you limit the speed to 20Mbit / s - as a result, it gives out only half of this value. Normally limits only at high speeds, about 80 Mbps. Can you suggest something?

Answer 1

well, in general, the shaper is built on two interfaces - on each on out, and all restrictions work...