diff --git a/etc/ssh/ssh_config b/etc/ssh/ssh_config
index 07b9cf4..b67c05e 100644
--- a/etc/ssh/ssh_config
+++ b/etc/ssh/ssh_config
@@ -1,7 +1,7 @@
 # Include drop-in configurations
 Include /etc/ssh/ssh_config.d/*.conf
 
-IPQoS af21 af11
+IPQoS cs2 cs0
 
 ServerAliveInterval 60
 ServerAliveCountMax 2
diff --git a/etc/ssh/sshd_config b/etc/ssh/sshd_config
index e60c5a2..da432b3 100644
--- a/etc/ssh/sshd_config
+++ b/etc/ssh/sshd_config
@@ -16,7 +16,7 @@ Include /etc/ssh/sshd_config.d/*.conf
 #ListenAddress 0.0.0.0
 #ListenAddress ::
 
-IPQoS af21 af11
+IPQoS cs2 cs0
 
 HostKey /etc/ssh/ssh_host_ed25519_key
 HostKeyAlgorithms ssh-ed25519
diff --git a/etc/unbound/unbound.conf b/etc/unbound/unbound.conf
index 8c68246..abd76ae 100644
--- a/etc/unbound/unbound.conf
+++ b/etc/unbound/unbound.conf
@@ -25,9 +25,6 @@ server:
     private-address: ::1/128
     private-address: ::ffff:0:0/96
 
-    # AF21
-    ip-dscp: 18
-
 # force DMARC enforcement
 local-zone: "_dmarc.gmail.com" static
 local-data: '_dmarc.gmail.com 600 IN TXT "v=DMARC1; p=quarantine; rua=mailto:mailauth-reports@google.com"'