a. Strongswan as a mediation server somewhere on the internet with a public IP + GRE-bridge.
-or-
b. Setup port forwarding for UDP ports 500/4500 on both routers to your tunnel endpoints, have them update a dyndns hostname and setup an IPsec tunnel + GRE