I inherited a system that is attempting (poorly) to QoS traffic going

across a tun interface (which is being used by OpenVPN).  Examples,

books, and ML suggest to tag on the internal interface ingress traffic

and QoS on the external interface egress traffic.
Since the traffic that I want to QoS doesn't really have an egress

interface to QoS on, I am trying to figure out a way to properly QoS

the traffic.
Here is a quick map on the traffic:
rl0 <--> tun0 <--> OpenVPN <--> rl1 <--> Internet
The traffic I want to QoS on is ingress on rl0 which in turn is also

ingress on tun0.  By the time it hits rl1, it is OpenVPN traffic.
Any recommendations on how to handle this?
--

Nick Golder