Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | # |
| 2 | # Network configuration |
| 3 | # |
| 4 | |
Robert P. J. Day | 031cf19 | 2008-07-30 03:14:01 -0700 | [diff] [blame] | 5 | menuconfig NET |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 6 | bool "Networking support" |
Geert Uytterhoeven | e9cc8bd | 2009-03-04 14:53:30 +0800 | [diff] [blame] | 7 | select NLATTR |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 8 | ---help--- |
| 9 | Unless you really know what you are doing, you should say Y here. |
| 10 | The reason is that some programs need kernel networking support even |
| 11 | when running on a stand-alone machine that isn't connected to any |
Sam Ravnborg | d5950b4 | 2005-07-11 21:03:49 -0700 | [diff] [blame] | 12 | other computer. |
| 13 | |
| 14 | If you are upgrading from an older kernel, you |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 15 | should consider updating your networking tools too because changes |
| 16 | in the kernel and the tools often go hand in hand. The tools are |
| 17 | contained in the package net-tools, the location and version number |
| 18 | of which are given in <file:Documentation/Changes>. |
| 19 | |
| 20 | For a general introduction to Linux networking, it is highly |
| 21 | recommended to read the NET-HOWTO, available from |
| 22 | <http://www.tldp.org/docs.html#howto>. |
| 23 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 24 | if NET |
| 25 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 26 | menu "Networking options" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 27 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 28 | source "net/packet/Kconfig" |
| 29 | source "net/unix/Kconfig" |
| 30 | source "net/xfrm/Kconfig" |
Martin Schwidefsky | 2356f4c | 2007-02-08 13:37:42 -0800 | [diff] [blame] | 31 | source "net/iucv/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 32 | |
| 33 | config INET |
| 34 | bool "TCP/IP networking" |
| 35 | ---help--- |
| 36 | These are the protocols used on the Internet and on most local |
| 37 | Ethernets. It is highly recommended to say Y here (this will enlarge |
YOSHIFUJI Hideaki | cf80efc | 2008-02-12 17:35:16 +0900 | [diff] [blame] | 38 | your kernel by about 400 KB), since some programs (e.g. the X window |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 39 | system) use TCP/IP even if your machine is not connected to any |
| 40 | other computer. You will get the so-called loopback device which |
| 41 | allows you to ping yourself (great fun, that!). |
| 42 | |
| 43 | For an excellent introduction to Linux networking, please read the |
| 44 | Linux Networking HOWTO, available from |
| 45 | <http://www.tldp.org/docs.html#howto>. |
| 46 | |
| 47 | If you say Y here and also to "/proc file system support" and |
| 48 | "Sysctl support" below, you can change various aspects of the |
| 49 | behavior of the TCP/IP code by writing to the (virtual) files in |
| 50 | /proc/sys/net/ipv4/*; the options are explained in the file |
| 51 | <file:Documentation/networking/ip-sysctl.txt>. |
| 52 | |
| 53 | Short answer: say Y. |
| 54 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 55 | if INET |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 56 | source "net/ipv4/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 57 | source "net/ipv6/Kconfig" |
Paul Moore | 38c9437 | 2006-11-05 16:44:06 -0800 | [diff] [blame] | 58 | source "net/netlabel/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 59 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 60 | endif # if INET |
| 61 | |
James Morris | 984bc16 | 2006-06-09 00:29:17 -0700 | [diff] [blame] | 62 | config NETWORK_SECMARK |
| 63 | bool "Security Marking" |
| 64 | help |
| 65 | This enables security marking of network packets, similar |
| 66 | to nfmark, but designated for security purposes. |
| 67 | If you are unsure how to answer this question, answer N. |
| 68 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 69 | menuconfig NETFILTER |
Pablo Neira Ayuso | ef91fd5 | 2006-11-29 02:35:43 +0100 | [diff] [blame] | 70 | bool "Network packet filtering framework (Netfilter)" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 71 | ---help--- |
| 72 | Netfilter is a framework for filtering and mangling network packets |
| 73 | that pass through your Linux box. |
| 74 | |
| 75 | The most common use of packet filtering is to run your Linux box as |
| 76 | a firewall protecting a local network from the Internet. The type of |
| 77 | firewall provided by this kernel support is called a "packet |
| 78 | filter", which means that it can reject individual network packets |
| 79 | based on type, source, destination etc. The other kind of firewall, |
| 80 | a "proxy-based" one, is more secure but more intrusive and more |
| 81 | bothersome to set up; it inspects the network traffic much more |
| 82 | closely, modifies it and has knowledge about the higher level |
| 83 | protocols, which a packet filter lacks. Moreover, proxy-based |
| 84 | firewalls often require changes to the programs running on the local |
| 85 | clients. Proxy-based firewalls don't need support by the kernel, but |
| 86 | they are often combined with a packet filter, which only works if |
| 87 | you say Y here. |
| 88 | |
| 89 | You should also say Y here if you intend to use your Linux box as |
| 90 | the gateway to the Internet for a local network of machines without |
| 91 | globally valid IP addresses. This is called "masquerading": if one |
| 92 | of the computers on your local network wants to send something to |
| 93 | the outside, your box can "masquerade" as that computer, i.e. it |
| 94 | forwards the traffic to the intended outside destination, but |
| 95 | modifies the packets to make it look like they came from the |
| 96 | firewall box itself. It works both ways: if the outside host |
| 97 | replies, the Linux box will silently forward the traffic to the |
| 98 | correct local computer. This way, the computers on your local net |
| 99 | are completely invisible to the outside world, even though they can |
| 100 | reach the outside and can receive replies. It is even possible to |
| 101 | run globally visible servers from within a masqueraded local network |
| 102 | using a mechanism called portforwarding. Masquerading is also often |
| 103 | called NAT (Network Address Translation). |
| 104 | |
| 105 | Another use of Netfilter is in transparent proxying: if a machine on |
| 106 | the local network tries to connect to an outside host, your Linux |
| 107 | box can transparently forward the traffic to a local server, |
| 108 | typically a caching proxy server. |
| 109 | |
| 110 | Yet another use of Netfilter is building a bridging firewall. Using |
| 111 | a bridge with Network packet filtering enabled makes iptables "see" |
| 112 | the bridged traffic. For filtering on the lower network and Ethernet |
| 113 | protocols over the bridge, use ebtables (under bridge netfilter |
| 114 | configuration). |
| 115 | |
| 116 | Various modules exist for netfilter which replace the previous |
| 117 | masquerading (ipmasqadm), packet filtering (ipchains), transparent |
| 118 | proxying, and portforwarding mechanisms. Please see |
| 119 | <file:Documentation/Changes> under "iptables" for the location of |
| 120 | these packages. |
| 121 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 122 | if NETFILTER |
| 123 | |
| 124 | config NETFILTER_DEBUG |
| 125 | bool "Network packet filtering debugging" |
| 126 | depends on NETFILTER |
| 127 | help |
| 128 | You can say Y here if you want to get additional messages useful in |
| 129 | debugging the netfilter code. |
| 130 | |
Patrick McHardy | 33b8e77 | 2007-12-17 22:47:05 -0800 | [diff] [blame] | 131 | config NETFILTER_ADVANCED |
| 132 | bool "Advanced netfilter configuration" |
| 133 | depends on NETFILTER |
| 134 | default y |
| 135 | help |
| 136 | If you say Y here you can select between all the netfilter modules. |
Matt LaPlante | 692105b | 2009-01-26 11:12:25 +0100 | [diff] [blame] | 137 | If you say N the more unusual ones will not be shown and the |
Patrick McHardy | 33b8e77 | 2007-12-17 22:47:05 -0800 | [diff] [blame] | 138 | basic ones needed by most people will default to 'M'. |
| 139 | |
| 140 | If unsure, say Y. |
| 141 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 142 | config BRIDGE_NETFILTER |
| 143 | bool "Bridged IP/ARP packets filtering" |
| 144 | depends on BRIDGE && NETFILTER && INET |
Patrick McHardy | 33b8e77 | 2007-12-17 22:47:05 -0800 | [diff] [blame] | 145 | depends on NETFILTER_ADVANCED |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 146 | default y |
| 147 | ---help--- |
| 148 | Enabling this option will let arptables resp. iptables see bridged |
| 149 | ARP resp. IP traffic. If you want a bridging firewall, you probably |
| 150 | want this option enabled. |
| 151 | Enabling or disabling this option doesn't enable or disable |
| 152 | ebtables. |
| 153 | |
| 154 | If unsure, say N. |
| 155 | |
Harald Welte | 9eb0eec | 2005-09-17 00:41:21 -0700 | [diff] [blame] | 156 | source "net/netfilter/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 157 | source "net/ipv4/netfilter/Kconfig" |
| 158 | source "net/ipv6/netfilter/Kconfig" |
| 159 | source "net/decnet/netfilter/Kconfig" |
| 160 | source "net/bridge/netfilter/Kconfig" |
| 161 | |
| 162 | endif |
| 163 | |
Arnaldo Carvalho de Melo | 7c65787 | 2005-08-09 20:14:34 -0700 | [diff] [blame] | 164 | source "net/dccp/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 165 | source "net/sctp/Kconfig" |
Andy Grover | fe17f84 | 2009-02-24 15:30:39 +0000 | [diff] [blame] | 166 | source "net/rds/Kconfig" |
Per Liden | 1e63e68 | 2006-01-16 16:39:13 +0100 | [diff] [blame] | 167 | source "net/tipc/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 168 | source "net/atm/Kconfig" |
Patrick McHardy | a19800d | 2008-07-05 21:25:39 -0700 | [diff] [blame] | 169 | source "net/802/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 170 | source "net/bridge/Kconfig" |
Lennert Buytenhek | 91da11f | 2008-10-07 13:44:02 +0000 | [diff] [blame] | 171 | source "net/dsa/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 172 | source "net/8021q/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 173 | source "net/decnet/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 174 | source "net/llc/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 175 | source "net/ipx/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 176 | source "drivers/net/appletalk/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 177 | source "net/x25/Kconfig" |
| 178 | source "net/lapb/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 179 | source "net/econet/Kconfig" |
| 180 | source "net/wanrouter/Kconfig" |
remi.denis-courmont@nokia | 5075138 | 2009-01-23 03:00:25 +0000 | [diff] [blame] | 181 | source "net/phonet/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 182 | source "net/sched/Kconfig" |
Alexander Duyck | 2f90b86 | 2008-11-20 20:52:10 -0800 | [diff] [blame] | 183 | source "net/dcb/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 184 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 185 | menu "Network testing" |
| 186 | |
| 187 | config NET_PKTGEN |
| 188 | tristate "Packet Generator (USE WITH CAUTION)" |
| 189 | depends on PROC_FS |
| 190 | ---help--- |
| 191 | This module will inject preconfigured packets, at a configurable |
| 192 | rate, out of a given interface. It is used for network interface |
| 193 | stress testing and performance analysis. If you don't understand |
| 194 | what was just said, you don't need it: say N. |
| 195 | |
| 196 | Documentation on how to use the packet generator can be found |
| 197 | at <file:Documentation/networking/pktgen.txt>. |
| 198 | |
| 199 | To compile this code as a module, choose M here: the |
| 200 | module will be called pktgen. |
| 201 | |
Stephen Hemminger | a42e9d6 | 2006-06-05 17:30:32 -0700 | [diff] [blame] | 202 | config NET_TCPPROBE |
| 203 | tristate "TCP connection probing" |
| 204 | depends on INET && EXPERIMENTAL && PROC_FS && KPROBES |
| 205 | ---help--- |
| 206 | This module allows for capturing the changes to TCP connection |
Dave Jones | 9dadaa19 | 2006-06-08 23:42:09 -0700 | [diff] [blame] | 207 | state in response to incoming packets. It is used for debugging |
Stephen Hemminger | a42e9d6 | 2006-06-05 17:30:32 -0700 | [diff] [blame] | 208 | TCP congestion avoidance modules. If you don't understand |
| 209 | what was just said, you don't need it: say N. |
| 210 | |
Grant Grundler | 82fe7c9 | 2006-09-25 23:47:14 -0700 | [diff] [blame] | 211 | Documentation on how to use TCP connection probing can be found |
Stephen Hemminger | a42e9d6 | 2006-06-05 17:30:32 -0700 | [diff] [blame] | 212 | at http://linux-net.osdl.org/index.php/TcpProbe |
| 213 | |
| 214 | To compile this code as a module, choose M here: the |
| 215 | module will be called tcp_probe. |
| 216 | |
Neil Horman | 273ae44 | 2009-03-11 09:53:16 +0000 | [diff] [blame] | 217 | config NET_DROP_MONITOR |
| 218 | boolean "Network packet drop alerting service" |
| 219 | depends on INET && EXPERIMENTAL && TRACEPOINTS |
| 220 | ---help--- |
| 221 | This feature provides an alerting service to userspace in the |
| 222 | event that packets are discarded in the network stack. Alerts |
| 223 | are broadcast via netlink socket to any listening user space |
| 224 | process. If you don't need network drop alerts, or if you are ok |
| 225 | just checking the various proc files and other utilities for |
| 226 | drop statistics, say N here. |
| 227 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 228 | endmenu |
| 229 | |
| 230 | endmenu |
| 231 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 232 | source "net/ax25/Kconfig" |
Oliver Hartkopp | 0d66548 | 2007-11-16 15:52:17 -0800 | [diff] [blame] | 233 | source "net/can/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 234 | source "net/irda/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 235 | source "net/bluetooth/Kconfig" |
David Howells | 17926a7 | 2007-04-26 15:48:28 -0700 | [diff] [blame] | 236 | source "net/rxrpc/Kconfig" |
Adrian Bunk | d86b5e0 | 2006-01-21 00:46:55 +0100 | [diff] [blame] | 237 | |
Thomas Graf | 14c0b97 | 2006-08-04 03:38:38 -0700 | [diff] [blame] | 238 | config FIB_RULES |
| 239 | bool |
| 240 | |
Robert P. J. Day | 5442060 | 2008-07-24 12:20:09 -0400 | [diff] [blame] | 241 | menuconfig WIRELESS |
| 242 | bool "Wireless" |
Martin Schwidefsky | f54bfc0 | 2007-05-10 15:46:01 +0200 | [diff] [blame] | 243 | depends on !S390 |
Robert P. J. Day | 5442060 | 2008-07-24 12:20:09 -0400 | [diff] [blame] | 244 | default y |
| 245 | |
| 246 | if WIRELESS |
Johannes Berg | 2a5e1c0 | 2007-04-23 12:19:12 -0700 | [diff] [blame] | 247 | |
| 248 | source "net/wireless/Kconfig" |
Jiri Benc | f0706e82 | 2007-05-05 11:45:53 -0700 | [diff] [blame] | 249 | source "net/mac80211/Kconfig" |
Johannes Berg | 2a5e1c0 | 2007-04-23 12:19:12 -0700 | [diff] [blame] | 250 | |
Robert P. J. Day | 5442060 | 2008-07-24 12:20:09 -0400 | [diff] [blame] | 251 | endif # WIRELESS |
Johannes Berg | 2a5e1c0 | 2007-04-23 12:19:12 -0700 | [diff] [blame] | 252 | |
Inaky Perez-Gonzalez | b0c83ae | 2008-12-23 16:18:24 -0800 | [diff] [blame] | 253 | source "net/wimax/Kconfig" |
| 254 | |
Ivo van Doorn | cf4328c | 2007-05-07 00:34:20 -0700 | [diff] [blame] | 255 | source "net/rfkill/Kconfig" |
Latchesar Ionkov | bd238fb | 2007-07-10 17:57:28 -0500 | [diff] [blame] | 256 | source "net/9p/Kconfig" |
Ivo van Doorn | cf4328c | 2007-05-07 00:34:20 -0700 | [diff] [blame] | 257 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 258 | endif # if NET |