If I'm understanding your setup then you it's sure worth setting up in a lab. "Running IWAN" means to me deploying DMVPN, per tunnel QoS and PfRv3. DMVPN can be run with both the tunnel source and tunnel address being in a vrf. Since the DMVPN will abstract away all the lower level complication then per tunnel QoS and PfRv3 should follow relatively simply.