Basic routing with routes between two hops over SSTP but with public IP-addresses

Hey all.

LONG STORY (short scroll down)
After I tested around a lot with EoIP, Gre, OVPN etc. to get the same Broadcast I am totally frustrated about the results.
Best for now is EoIP but with a bad quality of connection. Any single point is clean and clear in up- and download. So … something inside the bridging is going wrong.
I know its hard to find errors and mistakes in a bridged area and for this a routing would be more easy to handle. (does not mean I am able to route anything)

MPLS with VPLS (over SSTP) was not a success for me and I think its much to small to do like this - the network and my brain :wink:
Well at the end MPLS with LDP and own internal (local) adresses was working fine for me over SSTP.
I was able to ping the two sites (via SSTP) and the LDP neighboors had a handshake and were seeing each other.
VPLS ofc with same ID (1:1) and correct local adresses (from the endpoints of sstp) was not moving any packet.
Well and for what I need you all will laugh…

Using EoIP over SSTP was leading to the same result like using EoIP alone with IPSec.
And after I used the logical MTU´s I started to test around and around. But even with hard bad MTU´s its working with the same bad line (upload 15-20% loss from R2 → R1)

**LONG STORY SHORT! (**ip adresses are not the real public)

R1 has a static (public) IP adress 12.12.12.162 and the gateway 12.12.12.161 (ISP) within the network 12.12.12.160 (the whole network is 12.12.12.160/28)
If we need them, we can use some more adresses, but I dont see a use for now.

R1 has a PA net routed to the LAN site (77.55.88.0/22) via 12.12.12.162
R1 has 77.55.88.1 assigned to ether2 as gateway and ehter2 is the member of a bridge. With EoIP or other Layer2 tunneling its smart and I was able to give any IP adress from 77.55.88.2 - 77.55.92.255 with the gateway 77.55.88.1, but now I want to change it to static routing (see long story, not satisfied with layer 2 anymore)

R2 has a public static ip adress on ether1 to get online with ISP (lets say 13.13.13.150)

STEP1
Of course deleting 77.55.88.1 as ip adress on ether2 (I want the whole /22 net to be routed, no splits)
Creating a route where everything searching for 77.55.88.0/22 on R1 gets routed to 13.13.13.150 – no this is not working. More then one hop because its the static public provider address of R2. And thinking about OSPF would be a bit crazy while not able to route anything smaller with success.

STEP2
Starting SSTP and creating 10.10.9.1/24 (R1) and 10.10.9.2/24 (R2) (this is working in the right way; those addresses of SSTP are not public and local, only)
Creating the route again.
Everything searching and coming in for 77.55.88.0/22 gets routed to 10.10.9.2

STEP3
Well, thats the point. The incoming traffic now is routed via the right direction over SSTP to R2 where all working places which needs a static own ip are located.
But on the backway, what is happening? If working station of R2 are now sending any packet, it wont take the route over SSTP. 77.55.88.1 is the gateway which is allocated to ether2 and packets will be delivered there, first. After this …
Its using the gateway 13.13.13.150 what is the static route of R2 to be online with the ISP, but not SSTP.
But I would like to have the same route back (well in this case to gateway 10.10.9.1 via SSTP)

STEP4
Maybe a connection mark? Because packet marks are all going thru the firewall (mangle rules) and are more heavy for the cpu.
I dont want to devide any other traffic. Just Connection In = Connection Out and not default Gateway from ISP

But where to start this? Just under IP → Routes → Rules?

Hope you can get me out of this. I am really open to learn more and after 10-15 years playing around with Layer2, STP, RSTP, VLAN, RingSwitches, Queues, QoS and whatever … its maybe time to get the next step… (afraid) … but for now I have 1000 informations and nothing is fitting :confused:

Draw a picture or reword your post so it clearly articulates the problem you are trying to solve so we community members can help you get there.