A token bucket instantiation regulate packets in a traffic flow stream based on a predetermined peak traffic flow rate. The token bucket size is nominally set to zero. An evaluation is made at a device that has received a given packet. The packet is considered conforming and is passed from the device if the token depth of the bucket is zero or greater. The token depth is decreased by the number of byes in the packet that was passed. The token depth is continuously replenished at a predetermined token rate until the predetermined bucket size is attained (the bucket is full). A received packet is deemed nonconforming if the token depth is less than zero; the non-conforming packet is not passed but is processed according to non-conforming criteria. Token bucket instantiations may be implemented in hardware, software or firmware for each traffic flow to regulate traffic to a given user.