Some query on ingress policing

Hi List,
It is really appreciable, if one of you can clarify me on this issue.

I was going thro the packet journey thro the network stack in Linux.
Now if I want enable ingress policing, it looks like packet
classification and policing should happen in netif_rx (i.e in the
interrupt context) before packet is queued on to the input queue am I
missing something.