Today I learned that on #mikrotik #tilera the order of /ip firewall filter rules matter for performance. Bump at end of graph was result of moving return to end of all rules, and then moving it back after last rule from this chain.