Model :

Hardware Version : Not Clear

Firmware Version :

ISP :

Looking for a layout and hardware that will work good below.

AD Computer/User - (AD Site 1 x.x.1.0) - (Looking for Site to Site VPN with IPSEC for encryption / Site 1) - (Internet) - (Looking for Site to Site VPN with IPSEC for encryption / Site 2) - (AD Site 2 x.x.2.0) - AD Computer / User

Requirements:
Currently have a DDNS and would like to use it, or another DDNS. No static IP on either site.
DNS Replication
AD Replication
Encrypted tunnel that is routable from both sides from each client.
VPN from off site users to be able to navigate both sites with one connection (Prefer within the router to be AD aware but if not RRAS will do)
Wireless would be nice but not required. 802.11ac preferred but not required.

I would like a small footprint since there are no SEA / IDF in the two remote sites. I am considering the TL-ER604W on both ends.

Thank you for your suggestions.