You just saw that three different basic implementation architectures could be used
to provide IPsec facilities to TCP/IP networks. The choice of which implementation
you use, as well as whether you implement in end hosts or routers, impacts
the specific way that IPsec functions. Two specific modes of operation that are
related to these architectures are defined for IPsec. They are called transport mode
and tunnel mode