IPsec

acronym

networkingsecurity

The standard suite for encrypting and authenticating IP traffic, powering most site-to-site VPNs; keys are negotiated by IKE.

Two modes: transport protects the payload, tunnel wraps the whole packet - site-to-site VPNs live in the second.