iptables -A INPUT -p tcp --syn --dport 80 -m connlimit --connlimit-above 3 -j REJECT --reject-with tcp-reset iptables -L -v > /tmp/iptables_backup tc -s qdisc ls dev eth0 tc qdisc del dev eth0 root tc qdisc add dev eth0 root handle 1:0 htb default 10 tc class add dev eth0 parent 1:0 classid 1:10 htb rate 15kbps ceil 99999kbps prio 0 iptables -A OUTPUT -t mangle -p tcp --sport 80 -j MARK --set-mark 10 tc filter add dev eth0 parent 1:0 prio 0 protocol ip handle 10 fw flowid 1:10