Easiest way to get DSCP working on Ingress?

I mark traffic in 192.168.1.1/cgi-bin/luci/admin/network/firewall/rules