I just heard back from their support and their "senior" engineer have confirm that IDS/IPS and DPI will not work in a multilayer topology. And yes there are lots of other vendors out there that does...

@MR.S This might be the case why nothing is working for me The DPI TP Link might be only inspecting at layer 2 & 3 in the OSI model Since my network is a multilayer and not router on a stick model...

@MR.S Question for you: When you build your restriction. This part: Do you have multiple choice? Because you have all your VLAN interfaces on the router? or you have only one choice?

just tested DPI QoS Class modifier too. I put all my steaming services, youtube, hulu...etc in to Class 2. Went to Insight->QoS Data and kept hitting the refresh and Class 2 sat on 0 all the time...

@Clive_A yep your support team have given me that guide like 5x. and I just tried to do restrict Google and moved the ER8411 back to VLAN1 still nothing

So Support reply,   They wanted me to expand my routing interface from 192.168.1.0/30 to /24 but I have NOTHING other than two interfaces talking to each other. Here is my reply... and I don't...