Rate limit all trafffic except for 1 subnet

This might be simple, I just don’t know where to start.

This is hypothetical for now, but it might become reality.

There are some sites attached to each other through ipsec tunnels over the internet, let’s call it 192.168.200.0/20. It’s happening above my router. I just have a single uplink to the device above which splits traffic into the VPN (192.168.200.0/20) or to the internet (everything else).

I need to rate limit all traffic in my router except traffic destined or coming from that network (192.168.200.0/20). Since the VPN traffic and the internet traffic share the same uplink, we want to ensure that traffic destined for the internet doesn’t fill up the uplink thereby causing a slowdown on the VPN.

If this isn’t the right way to do it, let me know. But it seems like a simple solution for now.