Where should marking, policing, and shaping be performed in a service provider IP core?

at the core

at the PE router on the PE$-$to$-$CE link

at the P router

at the CE router