A network appliance includes quality of service circuitry to monitor operational context of the network appliance; and injection circuitry to: identify a content insertion slot in the stream; obtain a rule from a rule database; interface with analytics circuitry to determine inputs for the rule based on a context of the stream; interface with rule execution circuitry to execute the rule with the inputs for the rule, wherein the execution of the rule results in a determination to insert content into the stream; and in response to the determination to insert content into the stream: interface with the quality of service circuitry to determine insertable content to insert into the stream; and transmit over the egress port of the network appliance, the insertable content in the content insertion slot to a device consuming the stream, while buffering the stream in a memory device of the network appliance