I am delivering internet to several small communities in Alaska.

We are moving to OneWeb for these sites which used to be dedicated C-band and ku-Band satellite networks. Those satellite modems delivered routed public address space to those cities some as small as a /26, other sites multiple /24 depending on the population.

OneWeb delivers a private address space behind the satellite modem but we ordered a static IP for the panel and then configured a DMZ address to the Mikrotik CCR router behind the panel.

At my core with all our owned public address space, I have another CCR with BGP peering to multiple Tier 1 providers.

I would like to push the routed subnets currently routed across the legacy satellite network to that particular city now to the Mikrotik router behind the OneWeb Panel.

As this is public routed Internet address space, encryption is not particularly necessary.

What would be the best mechanism to tunnel those routed subnets to the far end Mikrotik behind the OneWeb Panel?

/interface/ipip

Depending on needs for further routing, vlan, discovery, romon, ... EOIP might be better since it will create a virtual interface for which you can do exactly the same as any ethernet interface.
But IPIP should do as well if you only need IP-related functions.

/interface vxlan

@panisk0cannotmakeupmymind are you asking or suggesting, and if so, which one and why//////////

Ended up just using l2tp without encryption. Was the quickest and easiest to setup.

Did you consider SSTP, as even without installing credentials it has some security>>>