configure QoS for a port with specific Access List match

I am looking to configure my QFX5100 32Q switch with a QoS for a specific ACL match. 

1) I would like to specifiy a ACL rule (with match field based on 5-tuple)

2) For the traffic that matches the 5-tuple I would like to define QoS metric with action such as: DSCP marking and Rate-limiting. Can some one please suggest appropriate configuration commands. 

I have already looked into: 

https://www.juniper.net/documentation/en_US/junos/topics/example/cos-ex-series-configuring.html

https://www.juniper.net/documentation/en_US/junos13.2/topics/example/cos-hierarchical-port-scheduling-ets-configuring.html#jd0e634

but couldn't find correct commands for configuration.  I see one option is to do it via the edit firewall command. 

set firewall family inet filter sample term block-bad from source-address 10.21.2.1/24

set firewall family inet filter sample term block-bad then dscp 10

set firewall family inet filter sample term block-bad then policer 

set interfaces so-0/1/0 unit 0 family inet filter input filter1

In every other vendor, e.g. cisco and arista these are part of QoS related commands where as in Junos this is part of firewall. 

Then what is the specific relavence of ClassOfService ? 

ALso how can I define the IN/ OUT direction for the port ??

Thank you