I know this is going to sound like a stupid question…
But I was really in doubt based on the Mikrotik documentation about this.
Are switch rules applied only in the ingress direction?
/interface ethernet switch rule
In the QoS with Switch Chip documentation there is an ambiguous reference to ingress/egress, suggesting that it is possible.
For CRS3xx series switches, it is possible to limit ingress traffic that matches certain parameters with ACL rules and it is possible to limit ingress/egress traffic per port basis. The policer is used for ingress traffic, the shaper is used for egress traffic. The ingress policer controls the received traffic with packet drops. Everything that exceeds the defined limit will get dropped. This can affect the TCP congestion control mechanism on end hosts and the achieved bandwidth can be actually less than defined. The egress shaper tries to queue packets that exceed the limit instead of dropping them. Eventually, it will also drop packets when the output queue gets full, however, it should allow utilizing the defined throughput better.
But I could only find references to egress in the configurations of
/interface ethernet switch port