Encryption in the IP header on layer 3, e.g. via IPsec, is used as application encryption for single data streams. It’s exceptionally scalable and solutions by various manufacturers are often compatible with each other. However, the data overhead for encryption is relatively high and data throughput is reduced in the case of small packet sizes.
Encryption using IPsec
Software-based encryption possible
Superior compatibility between different manufacturers