01
Payload
HTTP / Application Data
DATA: CLEAR TEXT
02
Layer 4
TCP Segment
PORT: 443 -> 1024
03
Layer 3
Original IP Header
SRC: 192.168.1.5
04
IPsec ESP
Encryption & Auth
AES-256 ENCRYPTED
05
New Header
Tunnel Gateway IP
SRC: 203.0.113.1