It would be *so nice* to have documentation for "tc". I once tried to use
it, but didn't understand it really. There was a package "wondershaper" on
SUSE Linux, but still I never managed to do much more than add a port to
Having a clean, logical and documented integration of traffic shaping and
firewalling would be a good reason to switch to nftables.
Of the GUI tools I really like "fwbuilder", although it lacks the ability
to define subroutines so you could compress several checks into one call
and thus make the overall ruleset smaller and cleaner.