diff --git a/packages/@aws-cdk/aws-ec2/package.json b/packages/@aws-cdk/aws-ec2/package.json
index c5d5d9be6a64e..4fdd45b9dfe8d 100644
--- a/packages/@aws-cdk/aws-ec2/package.json
+++ b/packages/@aws-cdk/aws-ec2/package.json
@@ -315,12 +315,152 @@
       "docs-public-apis:@aws-cdk/aws-ec2.OperatingSystemType.LINUX",
       "docs-public-apis:@aws-cdk/aws-ec2.OperatingSystemType.WINDOWS",
       "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ALL",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.HOPOPT",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ICMP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IGMP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.GGP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPV4",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ST",
       "docs-public-apis:@aws-cdk/aws-ec2.Protocol.TCP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.CBT",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.EGP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IGP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.BBN_RCC_MON",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.NVP_II",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.PUP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.EMCON",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.XNET",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.CHAOS",
       "docs-public-apis:@aws-cdk/aws-ec2.Protocol.UDP",
-      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ICMP",
-      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ICMPV6",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.MUX",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.DCN_MEAS",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.HMP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.PRM",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.XNS_IDP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.TRUNK_1",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.TRUNK_2",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.LEAF_1",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.LEAF_2",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.RDP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IRTP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ISO_TP4",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.NETBLT",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.MFE_NSP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.MERIT_INP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.DCCP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.THREEPC",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IDPR",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.XTP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.DDP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IDPR_CMTP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.TPPLUSPLUS",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IL",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPV6",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SDRP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPV6_ROUTE",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPV6_FRAG",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IDRP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.RSVP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.GRE",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.DSR",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.BNA",
       "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ESP",
       "docs-public-apis:@aws-cdk/aws-ec2.Protocol.AH",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.I_NLSP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SWIPE",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.NARP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.MOBILE",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.TLSP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SKIP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ICMPV6",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPV6_NONXT",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPV6_OPTS",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.CFTP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ANY_LOCAL",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SAT_EXPAK",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.KRYPTOLAN",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.RVD",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPPC",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ANY_DFS",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SAT_MON",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.VISA",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPCV",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.CPNX",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.CPHB",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.WSN",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.PVP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.BR_SAT_MON",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SUN_ND",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.WB_MON",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.WB_EXPAK",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ISO_IP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.VMTP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SECURE_VMTP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.VINES",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.TTP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPTM",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.NSFNET_IGP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.DGP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.TCF",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.EIGRP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.OSPFIGP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SPRITE_RPC",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.LARP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.MTP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.AX_25",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPIP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.MICP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SCC_SP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ETHERIP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ENCAP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ANY_ENC",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.GMTP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IFMP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.PNNI",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.PIM",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ARIS",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SCPS",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.QNX",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.A_N",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPCOMP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SNP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.COMPAQ_PEER",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPX_IN_IP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.VRRP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.PGM",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ANY_0_HOP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.L2TP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.DDX",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IATP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.STP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SRP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.UTI",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SMP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SM",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.PTP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ISIS_IPV4",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.FIRE",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.CRTP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.CRUDP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SSCOPMCE",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.IPLT",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SPS",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.PIPE",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SCTP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.FC",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.RSVP_E2E_IGNORE",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.MOBILITY_HEADER",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.UDPLITE",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.MPLS_IN_IP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.MANET",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.HIP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.SHIM6",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.WESP",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ROHC",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.ETHERNET",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.EXPERIMENT_1",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.EXPERIMENT_2",
+      "docs-public-apis:@aws-cdk/aws-ec2.Protocol.RESERVED" ,
       "docs-public-apis:@aws-cdk/aws-ec2.WindowsVersion.WINDOWS_SERVER_2008_SP2_ENGLISH_64BIT_SQL_2008_SP4_EXPRESS",
       "docs-public-apis:@aws-cdk/aws-ec2.WindowsVersion.WINDOWS_SERVER_2012_R2_RTM_CHINESE_SIMPLIFIED_64BIT_BASE",
       "docs-public-apis:@aws-cdk/aws-ec2.WindowsVersion.WINDOWS_SERVER_2012_R2_RTM_CHINESE_TRADITIONAL_64BIT_BASE",
diff --git a/packages/@aws-cdk/aws-ec2/test/integ.vpc.expected.json b/packages/@aws-cdk/aws-ec2/test/integ.vpc.expected.json
index 641b97b4ddbd5..9f2d6fe688990 100644
--- a/packages/@aws-cdk/aws-ec2/test/integ.vpc.expected.json
+++ b/packages/@aws-cdk/aws-ec2/test/integ.vpc.expected.json
@@ -568,20 +568,6 @@
             "IpProtocol": "udp",
             "ToPort": 801
           },
-          {
-            "CidrIp": "0.0.0.0/0",
-            "Description": "from 0.0.0.0/0:ESP 50",
-            "FromPort": 50,
-            "IpProtocol": "esp",
-            "ToPort": 50
-          },
-          {
-            "CidrIp": "0.0.0.0/0",
-            "Description": "from 0.0.0.0/0:AH 51",
-            "FromPort": 51,
-            "IpProtocol": "ah",
-            "ToPort": 51
-          }
         ],
         "VpcId": {
           "Ref": "MyVpcF9F0CA6F"
diff --git a/packages/@aws-cdk/aws-ec2/test/integ.vpc.ts b/packages/@aws-cdk/aws-ec2/test/integ.vpc.ts
index 88e4dacf9839a..2ffd5653e33f4 100644
--- a/packages/@aws-cdk/aws-ec2/test/integ.vpc.ts
+++ b/packages/@aws-cdk/aws-ec2/test/integ.vpc.ts
@@ -16,8 +16,6 @@ const rules = [
   ec2.Port.allUdp(),
   ec2.Port.udp(123),
   ec2.Port.udpRange(800, 801),
-  ec2.Port.esp(),
-  ec2.Port.ah(),
 ];
 
 for (const rule of rules) {