DoS Mitigation
ALTQ

Bandwidth shaping
Can filter traffic based on filter attributes
Works only with stateful rules
Multiple queueing disciplines supported

Most effective in front of bandwidth bottleneck
eg at upstream ISP(s)