Thanks Andrey, you mentioned ... "You could end up in a DoS situation where some rouge source send 1gbps worth of packets matching your priority class" Is this where a properly controlled QoS Trust Boundary comes into play?...like not trusting what ingresses that boundary, classifying and remarking... so that queue hijack can't occur ? - Aaron