In the bump in the stack (BITS) technique, IPsec is made a separate architectural
layer between IP and the data link layer. The cute name refers to the fact that IPsec
is an extra element in the networking protocol stack, as you can see in Figure 29-2.
IPsec intercepts IP datagrams as they are passed down the protocol stack, provides
security, and passes them to the data link layer.