diff --git a/deploy/README.md b/deploy/README.md
index 22c17ee..78b678e 100644
--- a/deploy/README.md
+++ b/deploy/README.md
@@ -123,6 +123,16 @@ lifecycle events:
 The nftables marking from (1) is qdisc-installer-agnostic and ships
 unchanged on production.
 
+**Disabling network shaping.** To turn the whole feature off on a deployed
+host:
+
+    sudo systemctl stop left4me-cake.service left4me-nft-mark.service
+    sudo systemctl disable left4me-cake.service left4me-nft-mark.service
+
+The sysctl baseline (`99-left4me.conf`) and the BBR/fq_codel defaults stay
+applied; revert those by removing the file and running `sysctl --system`
+if needed.
+
 ### CPU governor
 
 The performance governor squeezes a few percent off jitter under bursty load. `schedutil` is acceptable for sustained UDP workloads.
diff --git a/deploy/deploy-test-server.sh b/deploy/deploy-test-server.sh
index 01c70c9..b868f1a 100755
--- a/deploy/deploy-test-server.sh
+++ b/deploy/deploy-test-server.sh
@@ -85,9 +85,9 @@ fi
 
 if command -v apt-get >/dev/null 2>&1; then
     $sudo_cmd apt-get update
-    $sudo_cmd apt-get install -y python3 python3-venv python3-pip curl ca-certificates tar gzip util-linux sudo coreutils p7zip-full nftables
+    $sudo_cmd apt-get install -y python3 python3-venv python3-pip curl ca-certificates tar gzip util-linux sudo coreutils p7zip-full nftables iproute2
 elif command -v dnf >/dev/null 2>&1; then
-    $sudo_cmd dnf install -y python3 python3-pip curl ca-certificates tar gzip util-linux sudo coreutils p7zip p7zip-plugins nftables
+    $sudo_cmd dnf install -y python3 python3-pip curl ca-certificates tar gzip util-linux sudo coreutils p7zip p7zip-plugins nftables iproute
 else
     printf 'Unsupported package manager: expected apt-get or dnf\n' >&2
     exit 1