In a VPN tunnel, packets built in a specific VPN protocol format are encapsulated inside some other base or carrier protocol, then transmitted between a server and a user and de-encapsulated on the receiving side.
For internet-based virtual private networks, packets in one of several VPN protocols are encapsulated within IP packets. VPN protocols also support encryption and authentication to keep the tunnels secure.