Using DSCP for QoS

from https://wiki.linuxfoundation.org/networking/ifb :
"The Intermediate Functional Block device is the successor to the IMQ iptables module that was never integrated. Advantage over current IMQ; cleaner in particular in SMP; with a lot less code"

surely not :wink: but while iptables processing is more convenient and capable, it is also significantly slower.
afaik veth and ifb avoid calling into higher-level filtering for this reason.
this does not matter for a few mbps, but for a few hundred it probably will.

maybe bpfilter can make a difference here?

Addon:
i did not want to imply that you are in the wrong using imq for netfilter capability. especially if it works for you â„¢ ...
The author of ifb allegedly also came around and regreted this design aspect, but as with the integration in cake, nobody came around to do/change it yet .