how to limit traffic usage per user?

SystemD is able to do all sorts of resource accounting and control, and keeps cgroups for users around (user slices).

It should at least cover the monitoring and capping part.

Related: How to do network accounting using cgroups