Encapsulating traffic inside another protocol to create a private, often encrypted path across an untrusted network.
Reference Q&A for this concept is coming soon.