+---------------------------------+
   |     Transport Encapsulation     |
+->+---------------------------------+
|  |        Lower-NSH Header         |
|  +---------------------------------+
|  |        Upper-NSH Header         |
|  +---------------------------------+
|  |          Original Packet        |
+->+---------------------------------+
|
|                                          
+----Scope of NSH security protection 
     provided by a lower-level domain