This read-create INTEGER (in/out) specifies whether this VR-level DSByte filter applies to packets arriving on or departing from the virtual router's interfaces. An admin chooses in(1) to remark traffic as it enters the VR versus out(2) to remark it just before it leaves, depending on where in the topology consistent marking is needed. Applying the filter out(2) ensures traffic is stamped with the desired DSCP just before crossing to an upstream provider that trusts markings only at the network edge.