How is it implemented? Does it use Switch Port Membership based on VLANs internally?
Is this setup protected from attacks that are using packets with VLAN tags? WAN > LAN

I am using hAp ac. Switch type: QCA 8337. ROS v 6.48. I have bridge configured with 4 "LAN" ports - eth2,3,4,5 - with hw off-loading "on". eth1 port is "WAN", not part of the bridge. Switch config is empty (nothing added). Also no any VLANs are used. Question: - is eth1...

I vote for DNSCrypt.
OpenDNS supports DNSCrypt. I use Mikrotik as DNS proxy to OpenDNS.

Is it possible to configure Firewall Port Scan Detection (PSD) for UDP? I know how to do it for TCP, but wonder if it is possible to setup it for UDP. I need to detect and add attacker Ip to black list.

RB450G just stopped working. Bought on Jul 9, 2010 from rOc-nOc.com. 560uf caps poped and leaked.