Tunnel Versus Transport Mode
VPNs can use two main types of encapsulation encryption. These are known as tunnel-mode and transport-mode encryption.
Tunnel-mode encryption protects the entire original IP packet’s header and payload. The encrypted packet becomes the payload of a new IP packet with a new IP header. This form of encryption ensures that the identities of the original endpoints of the communication are kept confidential while the traffic traverses the secured link. Tunnel-mode encryption is commonly used by VPNs linking network sites together or providing secure remote access.
Transport-mode encryption protects only the original IP packet’s payload. The encrypted payload retains its original IP header. This form of encryption protects ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access