Encapsulating Security Payload
ESP is the IPsec component that actually encrypts packet contents and verifies their integrity. It can run in transport mode, protecting just the payload, or tunnel mode, wrapping the entire original packet for VPNs. It is IP protocol number 50 and does the heavy lifting in most IPsec deployments.