blob: ce90b8d923655ecfa3634ec864912734a2cd1a98 [file] [log] [blame]
Linus Torvalds1da177e2005-04-16 15:20:36 -07001#
2# XFRM configuration
3#
Sam Ravnborg6a2e9b72005-07-11 21:13:56 -07004config XFRM
5 bool
6 depends on NET
7
Jan Beulich7e152522012-05-15 01:57:44 +00008config XFRM_ALGO
9 tristate
10 select XFRM
11 select CRYPTO
12
Linus Torvalds1da177e2005-04-16 15:20:36 -070013config XFRM_USER
Masahide NAKAMURA654b32c2006-08-23 19:12:56 -070014 tristate "Transformation user configuration interface"
Jan Beulich7e152522012-05-15 01:57:44 +000015 depends on INET
16 select XFRM_ALGO
Linus Torvalds1da177e2005-04-16 15:20:36 -070017 ---help---
Masahide NAKAMURA654b32c2006-08-23 19:12:56 -070018 Support for Transformation(XFRM) user configuration interface
19 like IPsec used by native Linux tools.
Linus Torvalds1da177e2005-04-16 15:20:36 -070020
21 If unsure, say Y.
22
Masahide NAKAMURAc11f1a12006-08-23 22:38:14 -070023config XFRM_SUB_POLICY
24 bool "Transformation sub policy support (EXPERIMENTAL)"
25 depends on XFRM && EXPERIMENTAL
26 ---help---
27 Support sub policy for developers. By using sub policy with main
28 one, two policies can be applied to the same packet at once.
29 Policy which lives shorter time in kernel should be a sub.
30
31 If unsure, say N.
32
Shinta Sugimotod0473652007-02-08 13:13:07 -080033config XFRM_MIGRATE
34 bool "Transformation migrate database (EXPERIMENTAL)"
35 depends on XFRM && EXPERIMENTAL
36 ---help---
37 A feature to update locator(s) of a given IPsec security
38 association dynamically. This feature is required, for
39 instance, in a Mobile IPv6 environment with IPsec configuration
40 where mobile nodes change their attachment point to the Internet.
41
42 If unsure, say N.
43
Masahide NAKAMURA8ea84342007-12-20 20:44:02 -080044config XFRM_STATISTICS
45 bool "Transformation statistics (EXPERIMENTAL)"
Paul Mundt0f4bda02008-02-14 14:48:45 -080046 depends on INET && XFRM && PROC_FS && EXPERIMENTAL
Masahide NAKAMURA8ea84342007-12-20 20:44:02 -080047 ---help---
48 This statistics is not a SNMP/MIB specification but shows
49 statistics about transformation error (or almost error) factor
50 at packet processing for developer.
51
52 If unsure, say N.
53
Herbert Xu6fccab62008-07-25 02:54:40 -070054config XFRM_IPCOMP
55 tristate
Jan Beulich7e152522012-05-15 01:57:44 +000056 select XFRM_ALGO
Herbert Xu6fccab62008-07-25 02:54:40 -070057 select CRYPTO
58 select CRYPTO_DEFLATE
59
Sam Ravnborg6a2e9b72005-07-11 21:13:56 -070060config NET_KEY
61 tristate "PF_KEY sockets"
Jan Beulich7e152522012-05-15 01:57:44 +000062 select XFRM_ALGO
Sam Ravnborg6a2e9b72005-07-11 21:13:56 -070063 ---help---
64 PF_KEYv2 socket family, compatible to KAME ones.
65 They are required if you are going to use IPsec tools ported
66 from KAME.
67
68 Say Y unless you know what you are doing.
69
Shinta Sugimotof6ed0ec2007-02-08 13:15:05 -080070config NET_KEY_MIGRATE
71 bool "PF_KEY MIGRATE (EXPERIMENTAL)"
72 depends on NET_KEY && EXPERIMENTAL
73 select XFRM_MIGRATE
74 ---help---
75 Add a PF_KEY MIGRATE message to PF_KEYv2 socket family.
76 The PF_KEY MIGRATE message is used to dynamically update
77 locator(s) of a given IPsec security association.
78 This feature is required, for instance, in a Mobile IPv6
79 environment with IPsec configuration where mobile nodes
80 change their attachment point to the Internet. Detail
81 information can be found in the internet-draft
82 <draft-sugimoto-mip6-pfkey-migrate>.
83
84 If unsure, say N.
Sam Ravnborg6a2e9b72005-07-11 21:13:56 -070085