The answer is:
if match is not inverted (connection-limit=50,32), than only packets that exceeds limit of 50 concurrent connections will match this rule.
if match IS inverted (connection-limit=!50,32), than all packets that NOT exceed limit of 50 connections will match this rule.