vpn with qos and incoming ssh: how to use packet marks

I'm using EasyTomato, and I've set up an OpenVPN client to route most traffic over vpn, but also allow incoming ssh over wan. Specifically, in mangle PREROUTING I'm setting a mark of 0x1 to packets coming in on vlan2 (wan), I filter them later as needed, I have a separate routing table called novpn which contains everything except tun11 rules, and an ip rule to use the novpn table when the packet mark is 0x1. That part is fine.

Now I'd like to add QoS inside the VPN tunnel. Specifically,...

vpn with qos and incoming ssh: how to use packet marks