// Module included in the following assemblies:
//
// * networking/network_security/configuring-ipsec-ovn.adoc

:_mod-docs-content-type: CONCEPT
[id="nw-ovn-ipsec-encryption_{context}"]
= Encryption protocol and IPsec mode

[role="_abstract"]
Pod-to-pod IPsec in {product-title} uses `AES-GCM-16-256` in transport mode with a 256-bit key and a 16-byte integrity check value. _Transport mode_ encrypts end-to-end communication by adding an Encapsulated Security Payload (ESP) header to the IP header of the original packet and encrypts the packet data. 

{product-title} does not currently use or support IPsec _Tunnel mode_ for pod-to-pod communication.
