In IPv6, ESP is an end-to-end payload and it appears after hop-by-hop, routing, and fragmentation extension headers. The destination options extension header(s) could appear either before or after the AH header. Those headers marked with an asterisk (*) in Figure 7 may have a variable position if they are present.

Figure 7