IPsec
Classic VPN/tunneling protocol — encrypts IP packets between two gateways.
Site-to-site VPN between offices. Built into every serious enterprise router (Cisco, Fortinet, Juniper). Complex (IKE handshake, ESP/AH). Losing ground to WireGuard for new deployments — IPsec lives on in established enterprise environments.