As the current line of IPv6-over-IPv4 tunnels use protocol 41 (RFC1933) you can shape on that protocol. Thus the following should do the trick: tc filter add dev $DEV parent 1:0 protocol ip prio 10 u32 match ip protocol 41 0xff flowid 1:10 Alternatively you can also shape all the traffic going to the tunnelserver. Now if you want to shape the IPv6 traffic that goes in the tunnel seperatly you would need to use: tc filter add dev $DEV parent 1:0 protocol ip6 prio 10 u32 match tcp 22 0xff flowid 1:10 Or something similar, but I don't think that the shaping stuff can handle IPv6 yet, at least I never looked at it nor have tried it ;)