A download is downstream, traffic comes via the ISP into your connection before any shaping so you don't have any control over the downstream path.  Upstream is a different piece since there you go from high bw to low bw. And of course you have to make sure your packets are matched and tagged with the correct DSCP value.   By default all your upstream will indeed hit the normal queue and that queue can borrow from the high queue if nothing is in it. If your circuit is direct internet access the only way to shape your downstream traffic is to have a router in front of your MX and do some random dropping inbound and shape inbound traffic to a little lower than the actual pipe of your ISP. ... View more