Basically, it's a protocol that encrypts and authenticates normal TCP (and now UDP) communication. See the following for implementations: