pps limit

Hello, I am researching for the possibility to add global / or individual PPS limits for each VM. Perhaps anybody knows a working way? I am struggling as one of the VM inside the node constantly receives DDoS and it doesn't reach BW limit. However, the amount of packets it receives - crashes...