xref: /openbmc/linux/net/ipv6/Kconfig (revision f3539c12)
1#
2# IPv6 configuration
3#
4
5#   IPv6 as module will cause a CRASH if you try to unload it
6menuconfig IPV6
7	tristate "The IPv6 protocol"
8	default y
9	---help---
10	  Support for IP version 6 (IPv6).
11
12	  For general information about IPv6, see
13	  <https://en.wikipedia.org/wiki/IPv6>.
14	  For specific information about IPv6 under Linux, see
15	  Documentation/networking/ipv6.txt and read the HOWTO at
16	  <http://www.tldp.org/HOWTO/Linux+IPv6-HOWTO/>
17
18	  To compile this protocol support as a module, choose M here: the
19	  module will be called ipv6.
20
21if IPV6
22
23config IPV6_ROUTER_PREF
24	bool "IPv6: Router Preference (RFC 4191) support"
25	---help---
26	  Router Preference is an optional extension to the Router
27	  Advertisement message which improves the ability of hosts
28	  to pick an appropriate router, especially when the hosts
29	  are placed in a multi-homed network.
30
31	  If unsure, say N.
32
33config IPV6_ROUTE_INFO
34	bool "IPv6: Route Information (RFC 4191) support"
35	depends on IPV6_ROUTER_PREF
36	---help---
37	  This is experimental support of Route Information.
38
39	  If unsure, say N.
40
41config IPV6_OPTIMISTIC_DAD
42	bool "IPv6: Enable RFC 4429 Optimistic DAD"
43	---help---
44	  This is experimental support for optimistic Duplicate
45	  Address Detection.  It allows for autoconfigured addresses
46	  to be used more quickly.
47
48	  If unsure, say N.
49
50config INET6_AH
51	tristate "IPv6: AH transformation"
52	select XFRM_ALGO
53	select CRYPTO
54	select CRYPTO_HMAC
55	select CRYPTO_MD5
56	select CRYPTO_SHA1
57	---help---
58	  Support for IPsec AH.
59
60	  If unsure, say Y.
61
62config INET6_ESP
63	tristate "IPv6: ESP transformation"
64	select XFRM_ALGO
65	select CRYPTO
66	select CRYPTO_AUTHENC
67	select CRYPTO_HMAC
68	select CRYPTO_MD5
69	select CRYPTO_CBC
70	select CRYPTO_SHA1
71	select CRYPTO_DES
72	select CRYPTO_ECHAINIV
73	---help---
74	  Support for IPsec ESP.
75
76	  If unsure, say Y.
77
78config INET6_IPCOMP
79	tristate "IPv6: IPComp transformation"
80	select INET6_XFRM_TUNNEL
81	select XFRM_IPCOMP
82	---help---
83	  Support for IP Payload Compression Protocol (IPComp) (RFC3173),
84	  typically needed for IPsec.
85
86	  If unsure, say Y.
87
88config IPV6_MIP6
89	tristate "IPv6: Mobility"
90	select XFRM
91	---help---
92	  Support for IPv6 Mobility described in RFC 3775.
93
94	  If unsure, say N.
95
96config IPV6_ILA
97	tristate "IPv6: Identifier Locator Addressing (ILA)"
98	depends on NETFILTER
99	select LWTUNNEL
100	---help---
101	  Support for IPv6 Identifier Locator Addressing (ILA).
102
103	  ILA is a mechanism to do network virtualization without
104	  encapsulation. The basic concept of ILA is that we split an
105	  IPv6 address into a 64 bit locator and 64 bit identifier. The
106	  identifier is the identity of an entity in communication
107	  ("who") and the locator expresses the location of the
108	  entity ("where").
109
110	  ILA can be configured using the "encap ila" option with
111	  "ip -6 route" command. ILA is described in
112	  https://tools.ietf.org/html/draft-herbert-nvo3-ila-00.
113
114	  If unsure, say N.
115
116config INET6_XFRM_TUNNEL
117	tristate
118	select INET6_TUNNEL
119	default n
120
121config INET6_TUNNEL
122	tristate
123	default n
124
125config INET6_XFRM_MODE_TRANSPORT
126	tristate "IPv6: IPsec transport mode"
127	default IPV6
128	select XFRM
129	---help---
130	  Support for IPsec transport mode.
131
132	  If unsure, say Y.
133
134config INET6_XFRM_MODE_TUNNEL
135	tristate "IPv6: IPsec tunnel mode"
136	default IPV6
137	select XFRM
138	---help---
139	  Support for IPsec tunnel mode.
140
141	  If unsure, say Y.
142
143config INET6_XFRM_MODE_BEET
144	tristate "IPv6: IPsec BEET mode"
145	default IPV6
146	select XFRM
147	---help---
148	  Support for IPsec BEET mode.
149
150	  If unsure, say Y.
151
152config INET6_XFRM_MODE_ROUTEOPTIMIZATION
153	tristate "IPv6: MIPv6 route optimization mode"
154	select XFRM
155	---help---
156	  Support for MIPv6 route optimization mode.
157
158config IPV6_VTI
159tristate "Virtual (secure) IPv6: tunneling"
160	select IPV6_TUNNEL
161	select NET_IP_TUNNEL
162	depends on INET6_XFRM_MODE_TUNNEL
163	---help---
164	Tunneling means encapsulating data of one protocol type within
165	another protocol and sending it over a channel that understands the
166	encapsulating protocol. This can be used with xfrm mode tunnel to give
167	the notion of a secure tunnel for IPSEC and then use routing protocol
168	on top.
169
170config IPV6_SIT
171	tristate "IPv6: IPv6-in-IPv4 tunnel (SIT driver)"
172	select INET_TUNNEL
173	select NET_IP_TUNNEL
174	select IPV6_NDISC_NODETYPE
175	default y
176	---help---
177	  Tunneling means encapsulating data of one protocol type within
178	  another protocol and sending it over a channel that understands the
179	  encapsulating protocol. This driver implements encapsulation of IPv6
180	  into IPv4 packets. This is useful if you want to connect two IPv6
181	  networks over an IPv4-only path.
182
183	  Saying M here will produce a module called sit. If unsure, say Y.
184
185config IPV6_SIT_6RD
186	bool "IPv6: IPv6 Rapid Deployment (6RD)"
187	depends on IPV6_SIT
188	default n
189	---help---
190	  IPv6 Rapid Deployment (6rd; draft-ietf-softwire-ipv6-6rd) builds upon
191	  mechanisms of 6to4 (RFC3056) to enable a service provider to rapidly
192	  deploy IPv6 unicast service to IPv4 sites to which it provides
193	  customer premise equipment.  Like 6to4, it utilizes stateless IPv6 in
194	  IPv4 encapsulation in order to transit IPv4-only network
195	  infrastructure.  Unlike 6to4, a 6rd service provider uses an IPv6
196	  prefix of its own in place of the fixed 6to4 prefix.
197
198	  With this option enabled, the SIT driver offers 6rd functionality by
199	  providing additional ioctl API to configure the IPv6 Prefix for in
200	  stead of static 2002::/16 for 6to4.
201
202	  If unsure, say N.
203
204config IPV6_NDISC_NODETYPE
205	bool
206
207config IPV6_TUNNEL
208	tristate "IPv6: IP-in-IPv6 tunnel (RFC2473)"
209	select INET6_TUNNEL
210	select DST_CACHE
211	---help---
212	  Support for IPv6-in-IPv6 and IPv4-in-IPv6 tunnels described in
213	  RFC 2473.
214
215	  If unsure, say N.
216
217config IPV6_GRE
218	tristate "IPv6: GRE tunnel"
219	select IPV6_TUNNEL
220	select NET_IP_TUNNEL
221	depends on NET_IPGRE_DEMUX
222	---help---
223	  Tunneling means encapsulating data of one protocol type within
224	  another protocol and sending it over a channel that understands the
225	  encapsulating protocol. This particular tunneling driver implements
226	  GRE (Generic Routing Encapsulation) and at this time allows
227	  encapsulating of IPv4 or IPv6 over existing IPv6 infrastructure.
228	  This driver is useful if the other endpoint is a Cisco router: Cisco
229	  likes GRE much better than the other Linux tunneling driver ("IP
230	  tunneling" above). In addition, GRE allows multicast redistribution
231	  through the tunnel.
232
233	  Saying M here will produce a module called ip6_gre. If unsure, say N.
234
235config IPV6_FOU
236	tristate
237	default NET_FOU && IPV6
238
239config IPV6_FOU_TUNNEL
240	tristate
241	default NET_FOU_IP_TUNNELS && IPV6_FOU
242	select IPV6_TUNNEL
243
244config IPV6_MULTIPLE_TABLES
245	bool "IPv6: Multiple Routing Tables"
246	select FIB_RULES
247	---help---
248	  Support multiple routing tables.
249
250config IPV6_SUBTREES
251	bool "IPv6: source address based routing"
252	depends on IPV6_MULTIPLE_TABLES
253	---help---
254	  Enable routing by source address or prefix.
255
256	  The destination address is still the primary routing key, so mixing
257	  normal and source prefix specific routes in the same routing table
258	  may sometimes lead to unintended routing behavior.  This can be
259	  avoided by defining different routing tables for the normal and
260	  source prefix specific routes.
261
262	  If unsure, say N.
263
264config IPV6_MROUTE
265	bool "IPv6: multicast routing"
266	depends on IPV6
267	---help---
268	  Experimental support for IPv6 multicast forwarding.
269	  If unsure, say N.
270
271config IPV6_MROUTE_MULTIPLE_TABLES
272	bool "IPv6: multicast policy routing"
273	depends on IPV6_MROUTE
274	select FIB_RULES
275	help
276	  Normally, a multicast router runs a userspace daemon and decides
277	  what to do with a multicast packet based on the source and
278	  destination addresses. If you say Y here, the multicast router
279	  will also be able to take interfaces and packet marks into
280	  account and run multiple instances of userspace daemons
281	  simultaneously, each one handling a single table.
282
283	  If unsure, say N.
284
285config IPV6_PIMSM_V2
286	bool "IPv6: PIM-SM version 2 support"
287	depends on IPV6_MROUTE
288	---help---
289	  Support for IPv6 PIM multicast routing protocol PIM-SMv2.
290	  If unsure, say N.
291
292endif # IPV6
293