iptables -N checker
iptables -A FORWARD -s 192.168.10.5 -j checker
iptables -A FORWARD -d 192.168.10.5 -j checker
iptables -A checker -j MARK --set-mark 0x1
iptables -A FORWARD -m mark ! --mark 0x1 -j MARK --set-mark 0x2

tc qdisc add dev enp0s8 root handle 1: htb
tc class add dev enp0s8 parent 1: classid 1:1 htb rate 1200mbit ceil 1200mbit
tc class add dev enp0s8 parent 1:1 classid 1:15 htb rate 512kbit ceil 1024kbit prio 3
tc filter add dev enp0s8 parent 1:0 protocol ip prio 3 handle 2 fw classid 1:15 police rate 1000kbit burst 1024b drop
tc qdisc add dev enp0s8 parent 1:15 handle 150: tbf rate 200kbit latency 60000ms buffer 80kb