# How does Cilium's Bandwidth Manager enforce the kubernetes.io/egress-bandwidth annotation on a pod?

Cilium, Hard (Expert), Networking. https://k8wiz.com/uquiz/how-does-ciliums-bandwidth-manager-enforce-the-kubernetesioegress-bandwidth-annotation-on-a-pod

- A. A token bucket filter set up by the bandwidth CNI plugin
- B. eBPF Earliest Departure Time pacing with the fq qdisc
- C. iptables hashlimit rules on the pod's veth interface
- D. Envoy rate-limit filters on the node's egress proxy

**Answer:** eBPF Earliest Departure Time pacing with the fq qdisc

**Explanation:** The bandwidth CNI plugin uses a token bucket filter, which scales poorly and adds latency. Cilium sets a departure timestamp on each packet in eBPF and lets the fq qdisc on the node's network device release packets at that time. The result is smoother rate limiting with less queueing delay.