I have two routers linked by two logical links in two different VRF. I should move one router to another site and use Internet to keep the same connectivity. Since I use private IP addresses in my VRF, I thought about creating an IPsec tunnel over Internet with a new interface with public IP and then use that tunnel with my VRF. However, it is not clear if I need a tunnel per VRF or only one for both. Thank in advance for your help.
Cisco routers have a feature called VRF aware IPSec. It is available in version 12.2(33) and later. Here’s a brief introduction.
Other companies may have similar features.