Token Bucket Filter implemented as a netfilter queue