Under ideal circumstances, we would integrate IPsec’s protocols and capabilities
directly into IP itself. This is the most elegant solution, because it allows all IPsec
security modes and capabilities to be provided just as easily as regular IP. No extra
hardware or architectural layers are needed