1ec8f24b7SThomas Gleixner# SPDX-License-Identifier: GPL-2.0-only 21da177e4SLinus Torvalds# 31da177e4SLinus Torvalds# Network configuration 41da177e4SLinus Torvalds# 51da177e4SLinus Torvalds 6031cf19eSRobert P. J. Daymenuconfig NET 71da177e4SLinus Torvalds bool "Networking support" 8e9cc8bddSGeert Uytterhoeven select NLATTR 94cd5773aSAndy Shevchenko select GENERIC_NET_UTILS 10f89b7755SAlexei Starovoitov select BPF 11a7f7f624SMasahiro Yamada help 121da177e4SLinus Torvalds Unless you really know what you are doing, you should say Y here. 131da177e4SLinus Torvalds The reason is that some programs need kernel networking support even 141da177e4SLinus Torvalds when running on a stand-alone machine that isn't connected to any 15d5950b43SSam Ravnborg other computer. 16d5950b43SSam Ravnborg 17d5950b43SSam Ravnborg If you are upgrading from an older kernel, you 181da177e4SLinus Torvalds should consider updating your networking tools too because changes 191da177e4SLinus Torvalds in the kernel and the tools often go hand in hand. The tools are 201da177e4SLinus Torvalds contained in the package net-tools, the location and version number 211da177e4SLinus Torvalds of which are given in <file:Documentation/Changes>. 221da177e4SLinus Torvalds 231da177e4SLinus Torvalds For a general introduction to Linux networking, it is highly 241da177e4SLinus Torvalds recommended to read the NET-HOWTO, available from 251da177e4SLinus Torvalds <http://www.tldp.org/docs.html#howto>. 261da177e4SLinus Torvalds 276a2e9b73SSam Ravnborgif NET 286a2e9b73SSam Ravnborg 291dacc76dSJohannes Bergconfig WANT_COMPAT_NETLINK_MESSAGES 301dacc76dSJohannes Berg bool 311dacc76dSJohannes Berg help 321dacc76dSJohannes Berg This option can be selected by other options that need compat 331dacc76dSJohannes Berg netlink messages. 341dacc76dSJohannes Berg 351dacc76dSJohannes Bergconfig COMPAT_NETLINK_MESSAGES 361dacc76dSJohannes Berg def_bool y 371dacc76dSJohannes Berg depends on COMPAT 3840b53d8aSDavid S. Miller depends on WEXT_CORE || WANT_COMPAT_NETLINK_MESSAGES 391dacc76dSJohannes Berg help 401dacc76dSJohannes Berg This option makes it possible to send different netlink messages 411dacc76dSJohannes Berg to tasks depending on whether the task is a compat task or not. To 421dacc76dSJohannes Berg achieve this, you need to set skb_shinfo(skb)->frag_list to the 431dacc76dSJohannes Berg compat skb before sending the skb, the netlink code will sort out 441dacc76dSJohannes Berg which message to actually pass to the task. 451dacc76dSJohannes Berg 461dacc76dSJohannes Berg Newly written code should NEVER need this option but do 471dacc76dSJohannes Berg compat-independent messages instead! 481dacc76dSJohannes Berg 491cf51900SPablo Neiraconfig NET_INGRESS 501cf51900SPablo Neira bool 511cf51900SPablo Neira 521f211a1bSDaniel Borkmannconfig NET_EGRESS 531f211a1bSDaniel Borkmann bool 541f211a1bSDaniel Borkmann 552c64605bSPablo Neira Ayusoconfig NET_REDIRECT 562c64605bSPablo Neira Ayuso bool 572c64605bSPablo Neira Ayuso 58df5042f4SFlorian Westphalconfig SKB_EXTENSIONS 59df5042f4SFlorian Westphal bool 60df5042f4SFlorian Westphal 611da177e4SLinus Torvaldsmenu "Networking options" 621da177e4SLinus Torvalds 636a2e9b73SSam Ravnborgsource "net/packet/Kconfig" 646a2e9b73SSam Ravnborgsource "net/unix/Kconfig" 653c4d7559SDave Watsonsource "net/tls/Kconfig" 666a2e9b73SSam Ravnborgsource "net/xfrm/Kconfig" 672356f4cbSMartin Schwidefskysource "net/iucv/Kconfig" 68ac713874SUrsula Braunsource "net/smc/Kconfig" 6968e8b849SBjörn Töpelsource "net/xdp/Kconfig" 701da177e4SLinus Torvalds 711da177e4SLinus Torvaldsconfig INET 721da177e4SLinus Torvalds bool "TCP/IP networking" 73a7f7f624SMasahiro Yamada help 741da177e4SLinus Torvalds These are the protocols used on the Internet and on most local 751da177e4SLinus Torvalds Ethernets. It is highly recommended to say Y here (this will enlarge 76cf80efc2SYOSHIFUJI Hideaki your kernel by about 400 KB), since some programs (e.g. the X window 771da177e4SLinus Torvalds system) use TCP/IP even if your machine is not connected to any 781da177e4SLinus Torvalds other computer. You will get the so-called loopback device which 791da177e4SLinus Torvalds allows you to ping yourself (great fun, that!). 801da177e4SLinus Torvalds 811da177e4SLinus Torvalds For an excellent introduction to Linux networking, please read the 821da177e4SLinus Torvalds Linux Networking HOWTO, available from 831da177e4SLinus Torvalds <http://www.tldp.org/docs.html#howto>. 841da177e4SLinus Torvalds 851da177e4SLinus Torvalds If you say Y here and also to "/proc file system support" and 861da177e4SLinus Torvalds "Sysctl support" below, you can change various aspects of the 871da177e4SLinus Torvalds behavior of the TCP/IP code by writing to the (virtual) files in 881da177e4SLinus Torvalds /proc/sys/net/ipv4/*; the options are explained in the file 891cec2cacSMauro Carvalho Chehab <file:Documentation/networking/ip-sysctl.rst>. 901da177e4SLinus Torvalds 911da177e4SLinus Torvalds Short answer: say Y. 921da177e4SLinus Torvalds 936a2e9b73SSam Ravnborgif INET 941da177e4SLinus Torvaldssource "net/ipv4/Kconfig" 951da177e4SLinus Torvaldssource "net/ipv6/Kconfig" 9638c94377SPaul Mooresource "net/netlabel/Kconfig" 97f870fa0bSMat Martineausource "net/mptcp/Kconfig" 981da177e4SLinus Torvalds 996a2e9b73SSam Ravnborgendif # if INET 1006a2e9b73SSam Ravnborg 101984bc16cSJames Morrisconfig NETWORK_SECMARK 102984bc16cSJames Morris bool "Security Marking" 103984bc16cSJames Morris help 104984bc16cSJames Morris This enables security marking of network packets, similar 105984bc16cSJames Morris to nfmark, but designated for security purposes. 106984bc16cSJames Morris If you are unsure how to answer this question, answer N. 107984bc16cSJames Morris 108408eccceSDaniel Borkmannconfig NET_PTP_CLASSIFY 109408eccceSDaniel Borkmann def_bool n 110408eccceSDaniel Borkmann 111c1f19b51SRichard Cochranconfig NETWORK_PHY_TIMESTAMPING 112c1f19b51SRichard Cochran bool "Timestamping in PHY devices" 113408eccceSDaniel Borkmann select NET_PTP_CLASSIFY 114c1f19b51SRichard Cochran help 115767ff483SRichard Cochran This allows timestamping of network packets by PHYs (or 116767ff483SRichard Cochran other MII bus snooping devices) with hardware timestamping 117767ff483SRichard Cochran capabilities. This option adds some overhead in the transmit 118767ff483SRichard Cochran and receive paths. 119c1f19b51SRichard Cochran 120c1f19b51SRichard Cochran If you are unsure how to answer this question, answer N. 121c1f19b51SRichard Cochran 1221da177e4SLinus Torvaldsmenuconfig NETFILTER 123ef91fd52SPablo Neira Ayuso bool "Network packet filtering framework (Netfilter)" 124a7f7f624SMasahiro Yamada help 1251da177e4SLinus Torvalds Netfilter is a framework for filtering and mangling network packets 1261da177e4SLinus Torvalds that pass through your Linux box. 1271da177e4SLinus Torvalds 1281da177e4SLinus Torvalds The most common use of packet filtering is to run your Linux box as 1291da177e4SLinus Torvalds a firewall protecting a local network from the Internet. The type of 1301da177e4SLinus Torvalds firewall provided by this kernel support is called a "packet 1311da177e4SLinus Torvalds filter", which means that it can reject individual network packets 1321da177e4SLinus Torvalds based on type, source, destination etc. The other kind of firewall, 1331da177e4SLinus Torvalds a "proxy-based" one, is more secure but more intrusive and more 1341da177e4SLinus Torvalds bothersome to set up; it inspects the network traffic much more 1351da177e4SLinus Torvalds closely, modifies it and has knowledge about the higher level 1361da177e4SLinus Torvalds protocols, which a packet filter lacks. Moreover, proxy-based 1371da177e4SLinus Torvalds firewalls often require changes to the programs running on the local 1381da177e4SLinus Torvalds clients. Proxy-based firewalls don't need support by the kernel, but 1391da177e4SLinus Torvalds they are often combined with a packet filter, which only works if 1401da177e4SLinus Torvalds you say Y here. 1411da177e4SLinus Torvalds 1421da177e4SLinus Torvalds You should also say Y here if you intend to use your Linux box as 1431da177e4SLinus Torvalds the gateway to the Internet for a local network of machines without 1441da177e4SLinus Torvalds globally valid IP addresses. This is called "masquerading": if one 1451da177e4SLinus Torvalds of the computers on your local network wants to send something to 1461da177e4SLinus Torvalds the outside, your box can "masquerade" as that computer, i.e. it 1471da177e4SLinus Torvalds forwards the traffic to the intended outside destination, but 1481da177e4SLinus Torvalds modifies the packets to make it look like they came from the 1491da177e4SLinus Torvalds firewall box itself. It works both ways: if the outside host 1501da177e4SLinus Torvalds replies, the Linux box will silently forward the traffic to the 1511da177e4SLinus Torvalds correct local computer. This way, the computers on your local net 1521da177e4SLinus Torvalds are completely invisible to the outside world, even though they can 1531da177e4SLinus Torvalds reach the outside and can receive replies. It is even possible to 1541da177e4SLinus Torvalds run globally visible servers from within a masqueraded local network 1551da177e4SLinus Torvalds using a mechanism called portforwarding. Masquerading is also often 1561da177e4SLinus Torvalds called NAT (Network Address Translation). 1571da177e4SLinus Torvalds 1581da177e4SLinus Torvalds Another use of Netfilter is in transparent proxying: if a machine on 1591da177e4SLinus Torvalds the local network tries to connect to an outside host, your Linux 1601da177e4SLinus Torvalds box can transparently forward the traffic to a local server, 1611da177e4SLinus Torvalds typically a caching proxy server. 1621da177e4SLinus Torvalds 1631da177e4SLinus Torvalds Yet another use of Netfilter is building a bridging firewall. Using 1641da177e4SLinus Torvalds a bridge with Network packet filtering enabled makes iptables "see" 1651da177e4SLinus Torvalds the bridged traffic. For filtering on the lower network and Ethernet 1661da177e4SLinus Torvalds protocols over the bridge, use ebtables (under bridge netfilter 1671da177e4SLinus Torvalds configuration). 1681da177e4SLinus Torvalds 1691da177e4SLinus Torvalds Various modules exist for netfilter which replace the previous 1701da177e4SLinus Torvalds masquerading (ipmasqadm), packet filtering (ipchains), transparent 1711da177e4SLinus Torvalds proxying, and portforwarding mechanisms. Please see 1721da177e4SLinus Torvalds <file:Documentation/Changes> under "iptables" for the location of 1731da177e4SLinus Torvalds these packages. 1741da177e4SLinus Torvalds 1751da177e4SLinus Torvaldsif NETFILTER 1761da177e4SLinus Torvalds 17733b8e776SPatrick McHardyconfig NETFILTER_ADVANCED 17833b8e776SPatrick McHardy bool "Advanced netfilter configuration" 17933b8e776SPatrick McHardy depends on NETFILTER 18033b8e776SPatrick McHardy default y 18133b8e776SPatrick McHardy help 18233b8e776SPatrick McHardy If you say Y here you can select between all the netfilter modules. 183692105b8SMatt LaPlante If you say N the more unusual ones will not be shown and the 18433b8e776SPatrick McHardy basic ones needed by most people will default to 'M'. 18533b8e776SPatrick McHardy 18633b8e776SPatrick McHardy If unsure, say Y. 18733b8e776SPatrick McHardy 1881da177e4SLinus Torvaldsconfig BRIDGE_NETFILTER 18934666d46SPablo Neira Ayuso tristate "Bridged IP/ARP packets filtering" 19057f5877cSFlorian Westphal depends on BRIDGE 19134666d46SPablo Neira Ayuso depends on NETFILTER && INET 19233b8e776SPatrick McHardy depends on NETFILTER_ADVANCED 1932a95183aSFlorian Westphal select NETFILTER_FAMILY_BRIDGE 194de8bda1dSFlorian Westphal select SKB_EXTENSIONS 195a7f7f624SMasahiro Yamada help 1961da177e4SLinus Torvalds Enabling this option will let arptables resp. iptables see bridged 1971da177e4SLinus Torvalds ARP resp. IP traffic. If you want a bridging firewall, you probably 1981da177e4SLinus Torvalds want this option enabled. 1991da177e4SLinus Torvalds Enabling or disabling this option doesn't enable or disable 2001da177e4SLinus Torvalds ebtables. 2011da177e4SLinus Torvalds 2021da177e4SLinus Torvalds If unsure, say N. 2031da177e4SLinus Torvalds 2049eb0eec7SHarald Weltesource "net/netfilter/Kconfig" 2051da177e4SLinus Torvaldssource "net/ipv4/netfilter/Kconfig" 2061da177e4SLinus Torvaldssource "net/ipv6/netfilter/Kconfig" 2071da177e4SLinus Torvaldssource "net/decnet/netfilter/Kconfig" 2081da177e4SLinus Torvaldssource "net/bridge/netfilter/Kconfig" 2091da177e4SLinus Torvalds 2101da177e4SLinus Torvaldsendif 2111da177e4SLinus Torvalds 212d2ba09c1SAlexei Starovoitovsource "net/bpfilter/Kconfig" 213d2ba09c1SAlexei Starovoitov 2147c657876SArnaldo Carvalho de Melosource "net/dccp/Kconfig" 2151da177e4SLinus Torvaldssource "net/sctp/Kconfig" 216fe17f84fSAndy Groversource "net/rds/Kconfig" 2171e63e681SPer Lidensource "net/tipc/Kconfig" 2186a2e9b73SSam Ravnborgsource "net/atm/Kconfig" 219fd558d18SJames Chapmansource "net/l2tp/Kconfig" 220a19800d7SPatrick McHardysource "net/802/Kconfig" 2216a2e9b73SSam Ravnborgsource "net/bridge/Kconfig" 22291da11f8SLennert Buytenheksource "net/dsa/Kconfig" 2236a2e9b73SSam Ravnborgsource "net/8021q/Kconfig" 2241da177e4SLinus Torvaldssource "net/decnet/Kconfig" 2251da177e4SLinus Torvaldssource "net/llc/Kconfig" 2261da177e4SLinus Torvaldssource "drivers/net/appletalk/Kconfig" 2276a2e9b73SSam Ravnborgsource "net/x25/Kconfig" 2286a2e9b73SSam Ravnborgsource "net/lapb/Kconfig" 2295075138dSremi.denis-courmont@nokiasource "net/phonet/Kconfig" 2302c6bed7cSAlexander Aringsource "net/6lowpan/Kconfig" 2319ec76716SSergey Lapinsource "net/ieee802154/Kconfig" 2321010f540Salex.bluesman.smirnov@gmail.comsource "net/mac802154/Kconfig" 2331da177e4SLinus Torvaldssource "net/sched/Kconfig" 2342f90b865SAlexander Duycksource "net/dcb/Kconfig" 2351a4240f4SWang Leisource "net/dns_resolver/Kconfig" 236c6c8fea2SSven Eckelmannsource "net/batman-adv/Kconfig" 237ccb1352eSJesse Grosssource "net/openvswitch/Kconfig" 238d021c344SAndy Kingsource "net/vmw_vsock/Kconfig" 239eaaa3139SAndrey Vaginsource "net/netlink/Kconfig" 2400d89d203SSimon Hormansource "net/mpls/Kconfig" 241c411ed85SJiri Bencsource "net/nsh/Kconfig" 242f421436aSArvid Brodinsource "net/hsr/Kconfig" 243007f790cSJiri Pirkosource "net/switchdev/Kconfig" 2441b69c6d0SDavid Ahernsource "net/l3mdev/Kconfig" 245bdabad3eSCourtney Cavinsource "net/qrtr/Kconfig" 2462d283bddSGavin Shansource "net/ncsi/Kconfig" 2471da177e4SLinus Torvalds 248*919067ccSEric Dumazetconfig PCPU_DEV_REFCNT 249*919067ccSEric Dumazet bool "Use percpu variables to maintain network device refcount" 250*919067ccSEric Dumazet depends on SMP 251*919067ccSEric Dumazet default y 252*919067ccSEric Dumazet help 253*919067ccSEric Dumazet network device refcount are using per cpu variables if this option is set. 254*919067ccSEric Dumazet This can be forced to N to detect underflows (with a performance drop). 255*919067ccSEric Dumazet 256df334545SEric Dumazetconfig RPS 2576341e62bSChristoph Jaeger bool 258044c8d4bSYuanhan Liu depends on SMP && SYSFS 259df334545SEric Dumazet default y 260df334545SEric Dumazet 261c445477dSBen Hutchingsconfig RFS_ACCEL 2626341e62bSChristoph Jaeger bool 2630244ad00SMartin Schwidefsky depends on RPS 264c445477dSBen Hutchings select CPU_RMAP 265c445477dSBen Hutchings default y 266c445477dSBen Hutchings 2674e1beeccSTariq Toukanconfig SOCK_RX_QUEUE_MAPPING 2684e1beeccSTariq Toukan bool 2694e1beeccSTariq Toukan 270bf264145STom Herbertconfig XPS 2716341e62bSChristoph Jaeger bool 272044c8d4bSYuanhan Liu depends on SMP 2734e1beeccSTariq Toukan select SOCK_RX_QUEUE_MAPPING 274bf264145STom Herbert default y 275bf264145STom Herbert 2768cb2d8bfSGregory CLEMENTconfig HWBM 2778cb2d8bfSGregory CLEMENT bool 2788cb2d8bfSGregory CLEMENT 27986f8515fSDaniel Borkmannconfig CGROUP_NET_PRIO 280af636337STejun Heo bool "Network priority cgroup" 2815bc1421eSNeil Horman depends on CGROUPS 2822a56a1feSTejun Heo select SOCK_CGROUP_DATA 283a7f7f624SMasahiro Yamada help 2845bc1421eSNeil Horman Cgroup subsystem for use in assigning processes to network priorities on 28586f8515fSDaniel Borkmann a per-interface basis. 2865bc1421eSNeil Horman 287fe1217c4SDaniel Borkmannconfig CGROUP_NET_CLASSID 2886341e62bSChristoph Jaeger bool "Network classid cgroup" 289fe1217c4SDaniel Borkmann depends on CGROUPS 2902a56a1feSTejun Heo select SOCK_CGROUP_DATA 291a7f7f624SMasahiro Yamada help 292fe1217c4SDaniel Borkmann Cgroup subsystem for use as general purpose socket classid marker that is 293fe1217c4SDaniel Borkmann being used in cls_cgroup and for netfilter matching. 294fe1217c4SDaniel Borkmann 295e0d1095aSCong Wangconfig NET_RX_BUSY_POLL 2966341e62bSChristoph Jaeger bool 29789bf1b5aSEliezer Tamir default y 29806021292SEliezer Tamir 299114cf580STom Herbertconfig BQL 3006341e62bSChristoph Jaeger bool 301114cf580STom Herbert depends on SYSFS 302114cf580STom Herbert select DQL 303114cf580STom Herbert default y 304114cf580STom Herbert 3050a14842fSEric Dumazetconfig BPF_JIT 3060a14842fSEric Dumazet bool "enable BPF Just In Time compiler" 3076077776bSDaniel Borkmann depends on HAVE_CBPF_JIT || HAVE_EBPF_JIT 308b6202f97SEric Dumazet depends on MODULES 309a7f7f624SMasahiro Yamada help 3100a14842fSEric Dumazet Berkeley Packet Filter filtering capabilities are normally handled 3110a14842fSEric Dumazet by an interpreter. This option allows kernel to generate a native 3120a14842fSEric Dumazet code when filter is loaded in memory. This should speedup 3134f3446bbSDaniel Borkmann packet sniffing (libpcap/tcpdump). 3144f3446bbSDaniel Borkmann 3154f3446bbSDaniel Borkmann Note, admin should enable this feature changing: 3164f3446bbSDaniel Borkmann /proc/sys/net/core/bpf_jit_enable 3174f3446bbSDaniel Borkmann /proc/sys/net/core/bpf_jit_harden (optional) 31874451e66SDaniel Borkmann /proc/sys/net/core/bpf_jit_kallsyms (optional) 3190a14842fSEric Dumazet 32008848246SJohn Fastabendconfig BPF_STREAM_PARSER 32108848246SJohn Fastabend bool "enable BPF STREAM_PARSER" 322604326b4SDaniel Borkmann depends on INET 32308848246SJohn Fastabend depends on BPF_SYSCALL 324604326b4SDaniel Borkmann depends on CGROUP_BPF 32508848246SJohn Fastabend select STREAM_PARSER 326604326b4SDaniel Borkmann select NET_SOCK_MSG 327a7f7f624SMasahiro Yamada help 32888759609SCong Wang Enabling this allows a TCP stream parser to be used with 32908848246SJohn Fastabend BPF_MAP_TYPE_SOCKMAP. 33008848246SJohn Fastabend 33199bbc707SWillem de Bruijnconfig NET_FLOW_LIMIT 3326341e62bSChristoph Jaeger bool 33399bbc707SWillem de Bruijn depends on RPS 33499bbc707SWillem de Bruijn default y 335a7f7f624SMasahiro Yamada help 33699bbc707SWillem de Bruijn The network stack has to drop packets when a receive processing CPU's 33799bbc707SWillem de Bruijn backlog reaches netdev_max_backlog. If a few out of many active flows 33899bbc707SWillem de Bruijn generate the vast majority of load, drop their traffic earlier to 33999bbc707SWillem de Bruijn maintain capacity for the other flows. This feature provides servers 34099bbc707SWillem de Bruijn with many clients some protection against DoS by a single (spoofed) 34199bbc707SWillem de Bruijn flow that greatly exceeds average workload. 34299bbc707SWillem de Bruijn 3431da177e4SLinus Torvaldsmenu "Network testing" 3441da177e4SLinus Torvalds 3451da177e4SLinus Torvaldsconfig NET_PKTGEN 3461da177e4SLinus Torvalds tristate "Packet Generator (USE WITH CAUTION)" 347ffd756b3SThomas Graf depends on INET && PROC_FS 348a7f7f624SMasahiro Yamada help 3491da177e4SLinus Torvalds This module will inject preconfigured packets, at a configurable 3501da177e4SLinus Torvalds rate, out of a given interface. It is used for network interface 3511da177e4SLinus Torvalds stress testing and performance analysis. If you don't understand 3521da177e4SLinus Torvalds what was just said, you don't need it: say N. 3531da177e4SLinus Torvalds 3541da177e4SLinus Torvalds Documentation on how to use the packet generator can be found 355c1e4535fSMauro Carvalho Chehab at <file:Documentation/networking/pktgen.rst>. 3561da177e4SLinus Torvalds 3571da177e4SLinus Torvalds To compile this code as a module, choose M here: the 3581da177e4SLinus Torvalds module will be called pktgen. 3591da177e4SLinus Torvalds 360273ae44bSNeil Hormanconfig NET_DROP_MONITOR 361cad456d5SNeil Horman tristate "Network packet drop alerting service" 362911f8635SKees Cook depends on INET && TRACEPOINTS 363a7f7f624SMasahiro Yamada help 364273ae44bSNeil Horman This feature provides an alerting service to userspace in the 365273ae44bSNeil Horman event that packets are discarded in the network stack. Alerts 366273ae44bSNeil Horman are broadcast via netlink socket to any listening user space 367273ae44bSNeil Horman process. If you don't need network drop alerts, or if you are ok 368273ae44bSNeil Horman just checking the various proc files and other utilities for 369273ae44bSNeil Horman drop statistics, say N here. 370273ae44bSNeil Horman 3711da177e4SLinus Torvaldsendmenu 3721da177e4SLinus Torvalds 3731da177e4SLinus Torvaldsendmenu 3741da177e4SLinus Torvalds 3751da177e4SLinus Torvaldssource "net/ax25/Kconfig" 3760d66548aSOliver Hartkoppsource "net/can/Kconfig" 3771da177e4SLinus Torvaldssource "net/bluetooth/Kconfig" 37817926a79SDavid Howellssource "net/rxrpc/Kconfig" 379ab7ac4ebSTom Herbertsource "net/kcm/Kconfig" 38043a0c675STom Herbertsource "net/strparser/Kconfig" 381d86b5e0eSAdrian Bunk 38214c0b97dSThomas Grafconfig FIB_RULES 38314c0b97dSThomas Graf bool 38414c0b97dSThomas Graf 3855442060cSRobert P. J. Daymenuconfig WIRELESS 3865442060cSRobert P. J. Day bool "Wireless" 387f54bfc0eSMartin Schwidefsky depends on !S390 3885442060cSRobert P. J. Day default y 3895442060cSRobert P. J. Day 3905442060cSRobert P. J. Dayif WIRELESS 3912a5e1c0eSJohannes Berg 3922a5e1c0eSJohannes Bergsource "net/wireless/Kconfig" 393f0706e82SJiri Bencsource "net/mac80211/Kconfig" 3942a5e1c0eSJohannes Berg 3955442060cSRobert P. J. Dayendif # WIRELESS 3962a5e1c0eSJohannes Berg 397cf4328cdSIvo van Doornsource "net/rfkill/Kconfig" 398bd238fb4SLatchesar Ionkovsource "net/9p/Kconfig" 3993908c690SSjur Braendelandsource "net/caif/Kconfig" 4003d14c5d2SYehuda Sadehsource "net/ceph/Kconfig" 4013e256b8fSLauro Ramos Venanciosource "net/nfc/Kconfig" 4026ae0a628SYotam Gigisource "net/psample/Kconfig" 4031ce84604SYotam Gigisource "net/ife/Kconfig" 4043908c690SSjur Braendeland 405499a2425SRoopa Prabhuconfig LWTUNNEL 406499a2425SRoopa Prabhu bool "Network light weight tunnels" 407a7f7f624SMasahiro Yamada help 408499a2425SRoopa Prabhu This feature provides an infrastructure to support light weight 409499a2425SRoopa Prabhu tunnels like mpls. There is no netdevice associated with a light 410499a2425SRoopa Prabhu weight tunnel endpoint. Tunnel encapsulation parameters are stored 411499a2425SRoopa Prabhu with light weight tunnel state associated with fib routes. 412cf4328cdSIvo van Doorn 4133a0af8fdSThomas Grafconfig LWTUNNEL_BPF 4143a0af8fdSThomas Graf bool "Execute BPF program as route nexthop action" 415b251f9f6SPeter Oskolkov depends on LWTUNNEL && INET 4163a0af8fdSThomas Graf default y if LWTUNNEL=y 417a7f7f624SMasahiro Yamada help 4183a0af8fdSThomas Graf Allows to run BPF programs as a nexthop action following a route 4193a0af8fdSThomas Graf lookup for incoming and outgoing packets. 4203a0af8fdSThomas Graf 421911362c7SPaolo Abeniconfig DST_CACHE 4229b246841SDave Jones bool 423911362c7SPaolo Abeni default n 424911362c7SPaolo Abeni 42597e219b7SEric Dumazetconfig GRO_CELLS 42697e219b7SEric Dumazet bool 42797e219b7SEric Dumazet default n 42897e219b7SEric Dumazet 429ebf4e808SIlya Lesokhinconfig SOCK_VALIDATE_XMIT 430ebf4e808SIlya Lesokhin bool 431ebf4e808SIlya Lesokhin 432604326b4SDaniel Borkmannconfig NET_SOCK_MSG 433604326b4SDaniel Borkmann bool 434604326b4SDaniel Borkmann default n 435604326b4SDaniel Borkmann help 436604326b4SDaniel Borkmann The NET_SOCK_MSG provides a framework for plain sockets (e.g. TCP) or 437604326b4SDaniel Borkmann ULPs (upper layer modules, e.g. TLS) to process L7 application data 438604326b4SDaniel Borkmann with the help of BPF programs. 439604326b4SDaniel Borkmann 440bfcd3a46SJiri Pirkoconfig NET_DEVLINK 441f6b19b35SJiri Pirko bool 442f6b19b35SJiri Pirko default n 443bfcd3a46SJiri Pirko 444ff7d6b27SJesper Dangaard Brouerconfig PAGE_POOL 445ff7d6b27SJesper Dangaard Brouer bool 446ff7d6b27SJesper Dangaard Brouer 44730c8bd5aSSridhar Samudralaconfig FAILOVER 44830c8bd5aSSridhar Samudrala tristate "Generic failover module" 44930c8bd5aSSridhar Samudrala help 45030c8bd5aSSridhar Samudrala The failover module provides a generic interface for paravirtual 45130c8bd5aSSridhar Samudrala drivers to register a netdev and a set of ops with a failover 45230c8bd5aSSridhar Samudrala instance. The ops are used as event handlers that get called to 45330c8bd5aSSridhar Samudrala handle netdev register/unregister/link change/name change events 45430c8bd5aSSridhar Samudrala on slave pci ethernet devices with the same mac address as the 45530c8bd5aSSridhar Samudrala failover netdev. This enables paravirtual drivers to use a 45630c8bd5aSSridhar Samudrala VF as an accelerated low latency datapath. It also allows live 45730c8bd5aSSridhar Samudrala migration of VMs with direct attached VFs by failing over to the 45830c8bd5aSSridhar Samudrala paravirtual datapath when the VF is unplugged. 45930c8bd5aSSridhar Samudrala 4602b4a8990SMichal Kubecekconfig ETHTOOL_NETLINK 4612b4a8990SMichal Kubecek bool "Netlink interface for ethtool" 4622b4a8990SMichal Kubecek default y 4632b4a8990SMichal Kubecek help 4642b4a8990SMichal Kubecek An alternative userspace interface for ethtool based on generic 4652b4a8990SMichal Kubecek netlink. It provides better extensibility and some new features, 4662b4a8990SMichal Kubecek e.g. notification messages. 4672b4a8990SMichal Kubecek 4686a2e9b73SSam Ravnborgendif # if NET 469e47b65b0SSam Ravnborg 4706077776bSDaniel Borkmann# Used by archs to tell that they support BPF JIT compiler plus which flavour. 4716077776bSDaniel Borkmann# Only one of the two can be selected for a specific arch since eBPF JIT supersedes 4726077776bSDaniel Borkmann# the cBPF JIT. 4736077776bSDaniel Borkmann 4746077776bSDaniel Borkmann# Classic BPF JIT (cBPF) 4756077776bSDaniel Borkmannconfig HAVE_CBPF_JIT 4766077776bSDaniel Borkmann bool 4776077776bSDaniel Borkmann 4786077776bSDaniel Borkmann# Extended BPF JIT (eBPF) 4796077776bSDaniel Borkmannconfig HAVE_EBPF_JIT 480e47b65b0SSam Ravnborg bool 481