pfSense can NOT set DSCP bits. It can only match on them. You will likely need to do that in a switch between your fiber and the WAN interface as outlined in that blog. Your RANT against pfSense is misplaced. ETA: You might be able to get closer tagging VLAN 2 with VLAN Priority 3...