diff --git a/nix/nixos-module/container/upstream.nix b/nix/nixos-module/container/upstream.nix
index 2e04f00..314a50d 100644
--- a/nix/nixos-module/container/upstream.nix
+++ b/nix/nixos-module/container/upstream.nix
@@ -12,8 +12,16 @@ let
     else null;
 in
 {
-  systemd.network.networks = builtins.mapAttrs (_: _: {
+  systemd.network.networks = builtins.mapAttrs (_: { upstream, ... }: {
     DHCP = "yes";
+
+    extraConfig = ''
+      [CAKE]
+      Parent = root
+      # DOCSIS overhead
+      OverheadBytes = 18
+      Bandwidth = ${toString upstream.upBandwidth}K
+    '';
   }) upstreamInterfaces;
 
   networking.nat = lib.optionalAttrs (firstUpstreamInterface != null) {