Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | # |
| 2 | # Network configuration |
| 3 | # |
| 4 | |
Robert P. J. Day | 031cf19 | 2008-07-30 03:14:01 -0700 | [diff] [blame] | 5 | menuconfig NET |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 6 | bool "Networking support" |
Geert Uytterhoeven | e9cc8bd | 2009-03-04 14:53:30 +0800 | [diff] [blame] | 7 | select NLATTR |
Andy Shevchenko | 4cd5773 | 2013-06-04 19:46:26 +0300 | [diff] [blame] | 8 | select GENERIC_NET_UTILS |
Alexei Starovoitov | f89b775 | 2014-10-23 18:41:08 -0700 | [diff] [blame] | 9 | select BPF |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 10 | ---help--- |
| 11 | Unless you really know what you are doing, you should say Y here. |
| 12 | The reason is that some programs need kernel networking support even |
| 13 | when running on a stand-alone machine that isn't connected to any |
Sam Ravnborg | d5950b4 | 2005-07-11 21:03:49 -0700 | [diff] [blame] | 14 | other computer. |
| 15 | |
| 16 | If you are upgrading from an older kernel, you |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 17 | should consider updating your networking tools too because changes |
| 18 | in the kernel and the tools often go hand in hand. The tools are |
| 19 | contained in the package net-tools, the location and version number |
| 20 | of which are given in <file:Documentation/Changes>. |
| 21 | |
| 22 | For a general introduction to Linux networking, it is highly |
| 23 | recommended to read the NET-HOWTO, available from |
| 24 | <http://www.tldp.org/docs.html#howto>. |
| 25 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 26 | if NET |
| 27 | |
Johannes Berg | 1dacc76 | 2009-07-01 11:26:02 +0000 | [diff] [blame] | 28 | config WANT_COMPAT_NETLINK_MESSAGES |
| 29 | bool |
| 30 | help |
| 31 | This option can be selected by other options that need compat |
| 32 | netlink messages. |
| 33 | |
| 34 | config COMPAT_NETLINK_MESSAGES |
| 35 | def_bool y |
| 36 | depends on COMPAT |
David S. Miller | 40b53d8 | 2010-07-26 13:13:49 -0700 | [diff] [blame] | 37 | depends on WEXT_CORE || WANT_COMPAT_NETLINK_MESSAGES |
Johannes Berg | 1dacc76 | 2009-07-01 11:26:02 +0000 | [diff] [blame] | 38 | help |
| 39 | This option makes it possible to send different netlink messages |
| 40 | to tasks depending on whether the task is a compat task or not. To |
| 41 | achieve this, you need to set skb_shinfo(skb)->frag_list to the |
| 42 | compat skb before sending the skb, the netlink code will sort out |
| 43 | which message to actually pass to the task. |
| 44 | |
| 45 | Newly written code should NEVER need this option but do |
| 46 | compat-independent messages instead! |
| 47 | |
Pablo Neira | 1cf51900 | 2015-05-13 18:19:37 +0200 | [diff] [blame] | 48 | config NET_INGRESS |
| 49 | bool |
| 50 | |
Daniel Borkmann | 1f211a1 | 2016-01-07 22:29:47 +0100 | [diff] [blame] | 51 | config NET_EGRESS |
| 52 | bool |
| 53 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 54 | menu "Networking options" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 55 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 56 | source "net/packet/Kconfig" |
| 57 | source "net/unix/Kconfig" |
| 58 | source "net/xfrm/Kconfig" |
Martin Schwidefsky | 2356f4c | 2007-02-08 13:37:42 -0800 | [diff] [blame] | 59 | source "net/iucv/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 60 | |
| 61 | config INET |
| 62 | bool "TCP/IP networking" |
David S. Miller | 798b2cb | 2012-09-04 14:20:14 -0400 | [diff] [blame] | 63 | select CRYPTO |
| 64 | select CRYPTO_AES |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 65 | ---help--- |
| 66 | These are the protocols used on the Internet and on most local |
| 67 | Ethernets. It is highly recommended to say Y here (this will enlarge |
YOSHIFUJI Hideaki | cf80efc | 2008-02-12 17:35:16 +0900 | [diff] [blame] | 68 | your kernel by about 400 KB), since some programs (e.g. the X window |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 69 | system) use TCP/IP even if your machine is not connected to any |
| 70 | other computer. You will get the so-called loopback device which |
| 71 | allows you to ping yourself (great fun, that!). |
| 72 | |
| 73 | For an excellent introduction to Linux networking, please read the |
| 74 | Linux Networking HOWTO, available from |
| 75 | <http://www.tldp.org/docs.html#howto>. |
| 76 | |
| 77 | If you say Y here and also to "/proc file system support" and |
| 78 | "Sysctl support" below, you can change various aspects of the |
| 79 | behavior of the TCP/IP code by writing to the (virtual) files in |
| 80 | /proc/sys/net/ipv4/*; the options are explained in the file |
| 81 | <file:Documentation/networking/ip-sysctl.txt>. |
| 82 | |
| 83 | Short answer: say Y. |
| 84 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 85 | if INET |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 86 | source "net/ipv4/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 87 | source "net/ipv6/Kconfig" |
Paul Moore | 38c9437 | 2006-11-05 16:44:06 -0800 | [diff] [blame] | 88 | source "net/netlabel/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 89 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 90 | endif # if INET |
| 91 | |
James Morris | 984bc16 | 2006-06-09 00:29:17 -0700 | [diff] [blame] | 92 | config NETWORK_SECMARK |
| 93 | bool "Security Marking" |
| 94 | help |
| 95 | This enables security marking of network packets, similar |
| 96 | to nfmark, but designated for security purposes. |
| 97 | If you are unsure how to answer this question, answer N. |
| 98 | |
Daniel Borkmann | 408eccc | 2014-04-01 16:20:23 +0200 | [diff] [blame] | 99 | config NET_PTP_CLASSIFY |
| 100 | def_bool n |
| 101 | |
Richard Cochran | c1f19b5 | 2010-07-17 08:49:36 +0000 | [diff] [blame] | 102 | config NETWORK_PHY_TIMESTAMPING |
| 103 | bool "Timestamping in PHY devices" |
Daniel Borkmann | 408eccc | 2014-04-01 16:20:23 +0200 | [diff] [blame] | 104 | select NET_PTP_CLASSIFY |
Richard Cochran | c1f19b5 | 2010-07-17 08:49:36 +0000 | [diff] [blame] | 105 | help |
| 106 | This allows timestamping of network packets by PHYs with |
| 107 | hardware timestamping capabilities. This option adds some |
| 108 | overhead in the transmit and receive paths. |
| 109 | |
| 110 | If you are unsure how to answer this question, answer N. |
| 111 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 112 | menuconfig NETFILTER |
Pablo Neira Ayuso | ef91fd5 | 2006-11-29 02:35:43 +0100 | [diff] [blame] | 113 | bool "Network packet filtering framework (Netfilter)" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 114 | ---help--- |
| 115 | Netfilter is a framework for filtering and mangling network packets |
| 116 | that pass through your Linux box. |
| 117 | |
| 118 | The most common use of packet filtering is to run your Linux box as |
| 119 | a firewall protecting a local network from the Internet. The type of |
| 120 | firewall provided by this kernel support is called a "packet |
| 121 | filter", which means that it can reject individual network packets |
| 122 | based on type, source, destination etc. The other kind of firewall, |
| 123 | a "proxy-based" one, is more secure but more intrusive and more |
| 124 | bothersome to set up; it inspects the network traffic much more |
| 125 | closely, modifies it and has knowledge about the higher level |
| 126 | protocols, which a packet filter lacks. Moreover, proxy-based |
| 127 | firewalls often require changes to the programs running on the local |
| 128 | clients. Proxy-based firewalls don't need support by the kernel, but |
| 129 | they are often combined with a packet filter, which only works if |
| 130 | you say Y here. |
| 131 | |
| 132 | You should also say Y here if you intend to use your Linux box as |
| 133 | the gateway to the Internet for a local network of machines without |
| 134 | globally valid IP addresses. This is called "masquerading": if one |
| 135 | of the computers on your local network wants to send something to |
| 136 | the outside, your box can "masquerade" as that computer, i.e. it |
| 137 | forwards the traffic to the intended outside destination, but |
| 138 | modifies the packets to make it look like they came from the |
| 139 | firewall box itself. It works both ways: if the outside host |
| 140 | replies, the Linux box will silently forward the traffic to the |
| 141 | correct local computer. This way, the computers on your local net |
| 142 | are completely invisible to the outside world, even though they can |
| 143 | reach the outside and can receive replies. It is even possible to |
| 144 | run globally visible servers from within a masqueraded local network |
| 145 | using a mechanism called portforwarding. Masquerading is also often |
| 146 | called NAT (Network Address Translation). |
| 147 | |
| 148 | Another use of Netfilter is in transparent proxying: if a machine on |
| 149 | the local network tries to connect to an outside host, your Linux |
| 150 | box can transparently forward the traffic to a local server, |
| 151 | typically a caching proxy server. |
| 152 | |
| 153 | Yet another use of Netfilter is building a bridging firewall. Using |
| 154 | a bridge with Network packet filtering enabled makes iptables "see" |
| 155 | the bridged traffic. For filtering on the lower network and Ethernet |
| 156 | protocols over the bridge, use ebtables (under bridge netfilter |
| 157 | configuration). |
| 158 | |
| 159 | Various modules exist for netfilter which replace the previous |
| 160 | masquerading (ipmasqadm), packet filtering (ipchains), transparent |
| 161 | proxying, and portforwarding mechanisms. Please see |
| 162 | <file:Documentation/Changes> under "iptables" for the location of |
| 163 | these packages. |
| 164 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 165 | if NETFILTER |
| 166 | |
| 167 | config NETFILTER_DEBUG |
| 168 | bool "Network packet filtering debugging" |
| 169 | depends on NETFILTER |
| 170 | help |
| 171 | You can say Y here if you want to get additional messages useful in |
| 172 | debugging the netfilter code. |
| 173 | |
Patrick McHardy | 33b8e77 | 2007-12-17 22:47:05 -0800 | [diff] [blame] | 174 | config NETFILTER_ADVANCED |
| 175 | bool "Advanced netfilter configuration" |
| 176 | depends on NETFILTER |
| 177 | default y |
| 178 | help |
| 179 | If you say Y here you can select between all the netfilter modules. |
Matt LaPlante | 692105b | 2009-01-26 11:12:25 +0100 | [diff] [blame] | 180 | If you say N the more unusual ones will not be shown and the |
Patrick McHardy | 33b8e77 | 2007-12-17 22:47:05 -0800 | [diff] [blame] | 181 | basic ones needed by most people will default to 'M'. |
| 182 | |
| 183 | If unsure, say Y. |
| 184 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 185 | config BRIDGE_NETFILTER |
Pablo Neira Ayuso | 34666d4 | 2014-09-18 11:29:03 +0200 | [diff] [blame] | 186 | tristate "Bridged IP/ARP packets filtering" |
Florian Westphal | 57f5877 | 2014-09-30 10:59:18 +0200 | [diff] [blame] | 187 | depends on BRIDGE |
Pablo Neira Ayuso | 34666d4 | 2014-09-18 11:29:03 +0200 | [diff] [blame] | 188 | depends on NETFILTER && INET |
Patrick McHardy | 33b8e77 | 2007-12-17 22:47:05 -0800 | [diff] [blame] | 189 | depends on NETFILTER_ADVANCED |
Pablo Neira Ayuso | 34666d4 | 2014-09-18 11:29:03 +0200 | [diff] [blame] | 190 | default m |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 191 | ---help--- |
| 192 | Enabling this option will let arptables resp. iptables see bridged |
| 193 | ARP resp. IP traffic. If you want a bridging firewall, you probably |
| 194 | want this option enabled. |
| 195 | Enabling or disabling this option doesn't enable or disable |
| 196 | ebtables. |
| 197 | |
| 198 | If unsure, say N. |
| 199 | |
Harald Welte | 9eb0eec | 2005-09-17 00:41:21 -0700 | [diff] [blame] | 200 | source "net/netfilter/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 201 | source "net/ipv4/netfilter/Kconfig" |
| 202 | source "net/ipv6/netfilter/Kconfig" |
| 203 | source "net/decnet/netfilter/Kconfig" |
| 204 | source "net/bridge/netfilter/Kconfig" |
| 205 | |
| 206 | endif |
| 207 | |
Arnaldo Carvalho de Melo | 7c65787 | 2005-08-09 20:14:34 -0700 | [diff] [blame] | 208 | source "net/dccp/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 209 | source "net/sctp/Kconfig" |
Andy Grover | fe17f84 | 2009-02-24 15:30:39 +0000 | [diff] [blame] | 210 | source "net/rds/Kconfig" |
Per Liden | 1e63e68 | 2006-01-16 16:39:13 +0100 | [diff] [blame] | 211 | source "net/tipc/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 212 | source "net/atm/Kconfig" |
James Chapman | fd558d1 | 2010-04-02 06:18:33 +0000 | [diff] [blame] | 213 | source "net/l2tp/Kconfig" |
Patrick McHardy | a19800d | 2008-07-05 21:25:39 -0700 | [diff] [blame] | 214 | source "net/802/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 215 | source "net/bridge/Kconfig" |
Lennert Buytenhek | 91da11f | 2008-10-07 13:44:02 +0000 | [diff] [blame] | 216 | source "net/dsa/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 217 | source "net/8021q/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 218 | source "net/decnet/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 219 | source "net/llc/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 220 | source "net/ipx/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 221 | source "drivers/net/appletalk/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 222 | source "net/x25/Kconfig" |
| 223 | source "net/lapb/Kconfig" |
remi.denis-courmont@nokia | 5075138 | 2009-01-23 03:00:25 +0000 | [diff] [blame] | 224 | source "net/phonet/Kconfig" |
Alexander Aring | 2c6bed7 | 2014-07-11 10:24:18 +0200 | [diff] [blame] | 225 | source "net/6lowpan/Kconfig" |
Sergey Lapin | 9ec7671 | 2009-06-08 12:18:48 +0000 | [diff] [blame] | 226 | source "net/ieee802154/Kconfig" |
alex.bluesman.smirnov@gmail.com | 1010f54 | 2012-05-15 20:50:20 +0000 | [diff] [blame] | 227 | source "net/mac802154/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 228 | source "net/sched/Kconfig" |
Alexander Duyck | 2f90b86 | 2008-11-20 20:52:10 -0800 | [diff] [blame] | 229 | source "net/dcb/Kconfig" |
Wang Lei | 1a4240f | 2010-08-04 15:16:33 +0100 | [diff] [blame] | 230 | source "net/dns_resolver/Kconfig" |
Sven Eckelmann | c6c8fea | 2010-12-13 11:19:28 +0000 | [diff] [blame] | 231 | source "net/batman-adv/Kconfig" |
Jesse Gross | ccb1352 | 2011-10-25 19:26:31 -0700 | [diff] [blame] | 232 | source "net/openvswitch/Kconfig" |
Andy King | d021c34 | 2013-02-06 14:23:56 +0000 | [diff] [blame] | 233 | source "net/vmw_vsock/Kconfig" |
Andrey Vagin | eaaa313 | 2013-03-21 20:33:48 +0400 | [diff] [blame] | 234 | source "net/netlink/Kconfig" |
Simon Horman | 0d89d20 | 2013-05-23 21:02:52 +0000 | [diff] [blame] | 235 | source "net/mpls/Kconfig" |
Arvid Brodin | f421436 | 2013-10-30 21:10:47 +0100 | [diff] [blame] | 236 | source "net/hsr/Kconfig" |
Jiri Pirko | 007f790 | 2014-11-28 14:34:17 +0100 | [diff] [blame] | 237 | source "net/switchdev/Kconfig" |
David Ahern | 1b69c6d | 2015-09-29 20:07:11 -0700 | [diff] [blame] | 238 | source "net/l3mdev/Kconfig" |
Courtney Cavin | bdabad3 | 2016-05-06 07:09:08 -0700 | [diff] [blame] | 239 | source "net/qrtr/Kconfig" |
Gavin Shan | 2d283bd | 2016-07-19 11:54:16 +1000 | [diff] [blame] | 240 | source "net/ncsi/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 241 | |
Eric Dumazet | df33454 | 2010-03-24 19:13:54 +0000 | [diff] [blame] | 242 | config RPS |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 243 | bool |
Yuanhan Liu | 044c8d4 | 2013-11-21 14:32:01 -0800 | [diff] [blame] | 244 | depends on SMP && SYSFS |
Eric Dumazet | df33454 | 2010-03-24 19:13:54 +0000 | [diff] [blame] | 245 | default y |
| 246 | |
Ben Hutchings | c445477 | 2011-01-19 11:03:53 +0000 | [diff] [blame] | 247 | config RFS_ACCEL |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 248 | bool |
Martin Schwidefsky | 0244ad0 | 2013-08-30 09:39:53 +0200 | [diff] [blame] | 249 | depends on RPS |
Ben Hutchings | c445477 | 2011-01-19 11:03:53 +0000 | [diff] [blame] | 250 | select CPU_RMAP |
| 251 | default y |
| 252 | |
Tom Herbert | bf26414 | 2010-11-26 08:36:09 +0000 | [diff] [blame] | 253 | config XPS |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 254 | bool |
Yuanhan Liu | 044c8d4 | 2013-11-21 14:32:01 -0800 | [diff] [blame] | 255 | depends on SMP |
Tom Herbert | bf26414 | 2010-11-26 08:36:09 +0000 | [diff] [blame] | 256 | default y |
| 257 | |
Gregory CLEMENT | 8cb2d8b | 2016-03-14 09:39:04 +0100 | [diff] [blame] | 258 | config HWBM |
| 259 | bool |
| 260 | |
Daniel Borkmann | 86f8515 | 2013-12-29 17:27:11 +0100 | [diff] [blame] | 261 | config CGROUP_NET_PRIO |
Tejun Heo | af63633 | 2014-02-08 10:36:58 -0500 | [diff] [blame] | 262 | bool "Network priority cgroup" |
Neil Horman | 5bc1421 | 2011-11-22 05:10:51 +0000 | [diff] [blame] | 263 | depends on CGROUPS |
Tejun Heo | 2a56a1f | 2015-12-07 17:38:52 -0500 | [diff] [blame] | 264 | select SOCK_CGROUP_DATA |
Neil Horman | 5bc1421 | 2011-11-22 05:10:51 +0000 | [diff] [blame] | 265 | ---help--- |
| 266 | Cgroup subsystem for use in assigning processes to network priorities on |
Daniel Borkmann | 86f8515 | 2013-12-29 17:27:11 +0100 | [diff] [blame] | 267 | a per-interface basis. |
Neil Horman | 5bc1421 | 2011-11-22 05:10:51 +0000 | [diff] [blame] | 268 | |
Daniel Borkmann | fe1217c | 2013-12-29 18:27:10 +0100 | [diff] [blame] | 269 | config CGROUP_NET_CLASSID |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 270 | bool "Network classid cgroup" |
Daniel Borkmann | fe1217c | 2013-12-29 18:27:10 +0100 | [diff] [blame] | 271 | depends on CGROUPS |
Tejun Heo | 2a56a1f | 2015-12-07 17:38:52 -0500 | [diff] [blame] | 272 | select SOCK_CGROUP_DATA |
Daniel Borkmann | fe1217c | 2013-12-29 18:27:10 +0100 | [diff] [blame] | 273 | ---help--- |
| 274 | Cgroup subsystem for use as general purpose socket classid marker that is |
| 275 | being used in cls_cgroup and for netfilter matching. |
| 276 | |
Cong Wang | e0d1095 | 2013-08-01 11:10:25 +0800 | [diff] [blame] | 277 | config NET_RX_BUSY_POLL |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 278 | bool |
Eliezer Tamir | 89bf1b5 | 2013-06-14 16:33:46 +0300 | [diff] [blame] | 279 | default y |
Eliezer Tamir | 0602129 | 2013-06-10 11:39:50 +0300 | [diff] [blame] | 280 | |
Tom Herbert | 114cf58 | 2011-11-28 16:33:09 +0000 | [diff] [blame] | 281 | config BQL |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 282 | bool |
Tom Herbert | 114cf58 | 2011-11-28 16:33:09 +0000 | [diff] [blame] | 283 | depends on SYSFS |
| 284 | select DQL |
| 285 | default y |
| 286 | |
Eric Dumazet | 0a14842 | 2011-04-20 09:27:32 +0000 | [diff] [blame] | 287 | config BPF_JIT |
| 288 | bool "enable BPF Just In Time compiler" |
Daniel Borkmann | 6077776 | 2016-05-13 19:08:28 +0200 | [diff] [blame] | 289 | depends on HAVE_CBPF_JIT || HAVE_EBPF_JIT |
Eric Dumazet | b6202f9 | 2011-04-29 10:20:53 -0700 | [diff] [blame] | 290 | depends on MODULES |
Eric Dumazet | 0a14842 | 2011-04-20 09:27:32 +0000 | [diff] [blame] | 291 | ---help--- |
| 292 | Berkeley Packet Filter filtering capabilities are normally handled |
| 293 | by an interpreter. This option allows kernel to generate a native |
| 294 | code when filter is loaded in memory. This should speedup |
Daniel Borkmann | 4f3446b | 2016-05-13 19:08:32 +0200 | [diff] [blame] | 295 | packet sniffing (libpcap/tcpdump). |
| 296 | |
| 297 | Note, admin should enable this feature changing: |
| 298 | /proc/sys/net/core/bpf_jit_enable |
| 299 | /proc/sys/net/core/bpf_jit_harden (optional) |
Eric Dumazet | 0a14842 | 2011-04-20 09:27:32 +0000 | [diff] [blame] | 300 | |
Willem de Bruijn | 99bbc70 | 2013-05-20 04:02:32 +0000 | [diff] [blame] | 301 | config NET_FLOW_LIMIT |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 302 | bool |
Willem de Bruijn | 99bbc70 | 2013-05-20 04:02:32 +0000 | [diff] [blame] | 303 | depends on RPS |
| 304 | default y |
| 305 | ---help--- |
| 306 | The network stack has to drop packets when a receive processing CPU's |
| 307 | backlog reaches netdev_max_backlog. If a few out of many active flows |
| 308 | generate the vast majority of load, drop their traffic earlier to |
| 309 | maintain capacity for the other flows. This feature provides servers |
| 310 | with many clients some protection against DoS by a single (spoofed) |
| 311 | flow that greatly exceeds average workload. |
| 312 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 313 | menu "Network testing" |
| 314 | |
| 315 | config NET_PKTGEN |
| 316 | tristate "Packet Generator (USE WITH CAUTION)" |
Thomas Graf | ffd756b | 2013-07-29 13:44:15 +0200 | [diff] [blame] | 317 | depends on INET && PROC_FS |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 318 | ---help--- |
| 319 | This module will inject preconfigured packets, at a configurable |
| 320 | rate, out of a given interface. It is used for network interface |
| 321 | stress testing and performance analysis. If you don't understand |
| 322 | what was just said, you don't need it: say N. |
| 323 | |
| 324 | Documentation on how to use the packet generator can be found |
| 325 | at <file:Documentation/networking/pktgen.txt>. |
| 326 | |
| 327 | To compile this code as a module, choose M here: the |
| 328 | module will be called pktgen. |
| 329 | |
Stephen Hemminger | a42e9d6 | 2006-06-05 17:30:32 -0700 | [diff] [blame] | 330 | config NET_TCPPROBE |
| 331 | tristate "TCP connection probing" |
Kees Cook | 911f863 | 2012-10-02 11:19:40 -0700 | [diff] [blame] | 332 | depends on INET && PROC_FS && KPROBES |
Stephen Hemminger | a42e9d6 | 2006-06-05 17:30:32 -0700 | [diff] [blame] | 333 | ---help--- |
| 334 | This module allows for capturing the changes to TCP connection |
Dave Jones | 9dadaa19 | 2006-06-08 23:42:09 -0700 | [diff] [blame] | 335 | state in response to incoming packets. It is used for debugging |
Stephen Hemminger | a42e9d6 | 2006-06-05 17:30:32 -0700 | [diff] [blame] | 336 | TCP congestion avoidance modules. If you don't understand |
| 337 | what was just said, you don't need it: say N. |
| 338 | |
Grant Grundler | 82fe7c9 | 2006-09-25 23:47:14 -0700 | [diff] [blame] | 339 | Documentation on how to use TCP connection probing can be found |
Michael Witten | c996d8b | 2010-11-15 19:55:34 +0000 | [diff] [blame] | 340 | at: |
| 341 | |
| 342 | http://www.linuxfoundation.org/collaborate/workgroups/networking/tcpprobe |
Stephen Hemminger | a42e9d6 | 2006-06-05 17:30:32 -0700 | [diff] [blame] | 343 | |
| 344 | To compile this code as a module, choose M here: the |
| 345 | module will be called tcp_probe. |
| 346 | |
Neil Horman | 273ae44 | 2009-03-11 09:53:16 +0000 | [diff] [blame] | 347 | config NET_DROP_MONITOR |
Neil Horman | cad456d | 2012-05-17 10:04:00 +0000 | [diff] [blame] | 348 | tristate "Network packet drop alerting service" |
Kees Cook | 911f863 | 2012-10-02 11:19:40 -0700 | [diff] [blame] | 349 | depends on INET && TRACEPOINTS |
Neil Horman | 273ae44 | 2009-03-11 09:53:16 +0000 | [diff] [blame] | 350 | ---help--- |
| 351 | This feature provides an alerting service to userspace in the |
| 352 | event that packets are discarded in the network stack. Alerts |
| 353 | are broadcast via netlink socket to any listening user space |
| 354 | process. If you don't need network drop alerts, or if you are ok |
| 355 | just checking the various proc files and other utilities for |
| 356 | drop statistics, say N here. |
| 357 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 358 | endmenu |
| 359 | |
| 360 | endmenu |
| 361 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 362 | source "net/ax25/Kconfig" |
Oliver Hartkopp | 0d66548 | 2007-11-16 15:52:17 -0800 | [diff] [blame] | 363 | source "net/can/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 364 | source "net/irda/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 365 | source "net/bluetooth/Kconfig" |
David Howells | 17926a7 | 2007-04-26 15:48:28 -0700 | [diff] [blame] | 366 | source "net/rxrpc/Kconfig" |
Tom Herbert | ab7ac4e | 2016-03-07 14:11:06 -0800 | [diff] [blame] | 367 | source "net/kcm/Kconfig" |
Tom Herbert | 43a0c67 | 2016-08-15 14:51:01 -0700 | [diff] [blame] | 368 | source "net/strparser/Kconfig" |
Adrian Bunk | d86b5e0 | 2006-01-21 00:46:55 +0100 | [diff] [blame] | 369 | |
Thomas Graf | 14c0b97 | 2006-08-04 03:38:38 -0700 | [diff] [blame] | 370 | config FIB_RULES |
| 371 | bool |
| 372 | |
Robert P. J. Day | 5442060 | 2008-07-24 12:20:09 -0400 | [diff] [blame] | 373 | menuconfig WIRELESS |
| 374 | bool "Wireless" |
Martin Schwidefsky | f54bfc0 | 2007-05-10 15:46:01 +0200 | [diff] [blame] | 375 | depends on !S390 |
Robert P. J. Day | 5442060 | 2008-07-24 12:20:09 -0400 | [diff] [blame] | 376 | default y |
| 377 | |
| 378 | if WIRELESS |
Johannes Berg | 2a5e1c0 | 2007-04-23 12:19:12 -0700 | [diff] [blame] | 379 | |
| 380 | source "net/wireless/Kconfig" |
Jiri Benc | f0706e8 | 2007-05-05 11:45:53 -0700 | [diff] [blame] | 381 | source "net/mac80211/Kconfig" |
Johannes Berg | 2a5e1c0 | 2007-04-23 12:19:12 -0700 | [diff] [blame] | 382 | |
Robert P. J. Day | 5442060 | 2008-07-24 12:20:09 -0400 | [diff] [blame] | 383 | endif # WIRELESS |
Johannes Berg | 2a5e1c0 | 2007-04-23 12:19:12 -0700 | [diff] [blame] | 384 | |
Inaky Perez-Gonzalez | b0c83ae | 2008-12-23 16:18:24 -0800 | [diff] [blame] | 385 | source "net/wimax/Kconfig" |
| 386 | |
Ivo van Doorn | cf4328c | 2007-05-07 00:34:20 -0700 | [diff] [blame] | 387 | source "net/rfkill/Kconfig" |
Latchesar Ionkov | bd238fb | 2007-07-10 17:57:28 -0500 | [diff] [blame] | 388 | source "net/9p/Kconfig" |
Sjur Braendeland | 3908c69 | 2010-03-30 13:56:28 +0000 | [diff] [blame] | 389 | source "net/caif/Kconfig" |
Yehuda Sadeh | 3d14c5d | 2010-04-06 15:14:15 -0700 | [diff] [blame] | 390 | source "net/ceph/Kconfig" |
Lauro Ramos Venancio | 3e256b8 | 2011-07-01 19:31:33 -0300 | [diff] [blame] | 391 | source "net/nfc/Kconfig" |
Sjur Braendeland | 3908c69 | 2010-03-30 13:56:28 +0000 | [diff] [blame] | 392 | |
Roopa Prabhu | 499a242 | 2015-07-21 10:43:46 +0200 | [diff] [blame] | 393 | config LWTUNNEL |
| 394 | bool "Network light weight tunnels" |
| 395 | ---help--- |
| 396 | This feature provides an infrastructure to support light weight |
| 397 | tunnels like mpls. There is no netdevice associated with a light |
| 398 | weight tunnel endpoint. Tunnel encapsulation parameters are stored |
| 399 | with light weight tunnel state associated with fib routes. |
Ivo van Doorn | cf4328c | 2007-05-07 00:34:20 -0700 | [diff] [blame] | 400 | |
Thomas Graf | 3a0af8f | 2016-11-30 17:10:10 +0100 | [diff] [blame] | 401 | config LWTUNNEL_BPF |
| 402 | bool "Execute BPF program as route nexthop action" |
| 403 | depends on LWTUNNEL |
| 404 | default y if LWTUNNEL=y |
| 405 | ---help--- |
| 406 | Allows to run BPF programs as a nexthop action following a route |
| 407 | lookup for incoming and outgoing packets. |
| 408 | |
Paolo Abeni | 911362c | 2016-02-12 15:43:53 +0100 | [diff] [blame] | 409 | config DST_CACHE |
Dave Jones | 9b24684 | 2016-03-21 18:37:22 -0400 | [diff] [blame] | 410 | bool |
Paolo Abeni | 911362c | 2016-02-12 15:43:53 +0100 | [diff] [blame] | 411 | default n |
| 412 | |
Jiri Pirko | bfcd3a4 | 2016-02-26 17:32:23 +0100 | [diff] [blame] | 413 | config NET_DEVLINK |
| 414 | tristate "Network physical/parent device Netlink interface" |
| 415 | help |
| 416 | Network physical/parent device Netlink interface provides |
| 417 | infrastructure to support access to physical chip-wide config and |
| 418 | monitoring. |
| 419 | |
Arnd Bergmann | 3d1cbe8 | 2016-03-02 10:40:54 +0100 | [diff] [blame] | 420 | config MAY_USE_DEVLINK |
| 421 | tristate |
| 422 | default m if NET_DEVLINK=m |
| 423 | default y if NET_DEVLINK=y || NET_DEVLINK=n |
| 424 | help |
| 425 | Drivers using the devlink infrastructure should have a dependency |
| 426 | on MAY_USE_DEVLINK to ensure they do not cause link errors when |
| 427 | devlink is a loadable module and the driver using it is built-in. |
| 428 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 429 | endif # if NET |
Sam Ravnborg | e47b65b | 2012-05-21 20:45:37 +0200 | [diff] [blame] | 430 | |
Daniel Borkmann | 6077776 | 2016-05-13 19:08:28 +0200 | [diff] [blame] | 431 | # Used by archs to tell that they support BPF JIT compiler plus which flavour. |
| 432 | # Only one of the two can be selected for a specific arch since eBPF JIT supersedes |
| 433 | # the cBPF JIT. |
| 434 | |
| 435 | # Classic BPF JIT (cBPF) |
| 436 | config HAVE_CBPF_JIT |
| 437 | bool |
| 438 | |
| 439 | # Extended BPF JIT (eBPF) |
| 440 | config HAVE_EBPF_JIT |
Sam Ravnborg | e47b65b | 2012-05-21 20:45:37 +0200 | [diff] [blame] | 441 | bool |