xref: /openbmc/linux/net/sched/Kconfig (revision 96de2506)
1#
2# Traffic control configuration.
3#
4
5menuconfig NET_SCHED
6	bool "QoS and/or fair queueing"
7	select NET_SCH_FIFO
8	---help---
9	  When the kernel has several packets to send out over a network
10	  device, it has to decide which ones to send first, which ones to
11	  delay, and which ones to drop. This is the job of the queueing
12	  disciplines, several different algorithms for how to do this
13	  "fairly" have been proposed.
14
15	  If you say N here, you will get the standard packet scheduler, which
16	  is a FIFO (first come, first served). If you say Y here, you will be
17	  able to choose from among several alternative algorithms which can
18	  then be attached to different network devices. This is useful for
19	  example if some of your network devices are real time devices that
20	  need a certain minimum data flow rate, or if you need to limit the
21	  maximum data flow rate for traffic which matches specified criteria.
22	  This code is considered to be experimental.
23
24	  To administer these schedulers, you'll need the user-level utilities
25	  from the package iproute2+tc at
26	  <https://www.kernel.org/pub/linux/utils/net/iproute2/>.  That package
27	  also contains some documentation; for more, check out
28	  <http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2>.
29
30	  This Quality of Service (QoS) support will enable you to use
31	  Differentiated Services (diffserv) and Resource Reservation Protocol
32	  (RSVP) on your Linux router if you also say Y to the corresponding
33	  classifiers below.  Documentation and software is at
34	  <http://diffserv.sourceforge.net/>.
35
36	  If you say Y here and to "/proc file system" below, you will be able
37	  to read status information about packet schedulers from the file
38	  /proc/net/psched.
39
40	  The available schedulers are listed in the following questions; you
41	  can say Y to as many as you like. If unsure, say N now.
42
43if NET_SCHED
44
45comment "Queueing/Scheduling"
46
47config NET_SCH_CBQ
48	tristate "Class Based Queueing (CBQ)"
49	---help---
50	  Say Y here if you want to use the Class-Based Queueing (CBQ) packet
51	  scheduling algorithm. This algorithm classifies the waiting packets
52	  into a tree-like hierarchy of classes; the leaves of this tree are
53	  in turn scheduled by separate algorithms.
54
55	  See the top of <file:net/sched/sch_cbq.c> for more details.
56
57	  CBQ is a commonly used scheduler, so if you're unsure, you should
58	  say Y here. Then say Y to all the queueing algorithms below that you
59	  want to use as leaf disciplines.
60
61	  To compile this code as a module, choose M here: the
62	  module will be called sch_cbq.
63
64config NET_SCH_HTB
65	tristate "Hierarchical Token Bucket (HTB)"
66	---help---
67	  Say Y here if you want to use the Hierarchical Token Buckets (HTB)
68	  packet scheduling algorithm. See
69	  <http://luxik.cdi.cz/~devik/qos/htb/> for complete manual and
70	  in-depth articles.
71
72	  HTB is very similar to CBQ regarding its goals however is has
73	  different properties and different algorithm.
74
75	  To compile this code as a module, choose M here: the
76	  module will be called sch_htb.
77
78config NET_SCH_HFSC
79	tristate "Hierarchical Fair Service Curve (HFSC)"
80	---help---
81	  Say Y here if you want to use the Hierarchical Fair Service Curve
82	  (HFSC) packet scheduling algorithm.
83
84	  To compile this code as a module, choose M here: the
85	  module will be called sch_hfsc.
86
87config NET_SCH_ATM
88	tristate "ATM Virtual Circuits (ATM)"
89	depends on ATM
90	---help---
91	  Say Y here if you want to use the ATM pseudo-scheduler.  This
92	  provides a framework for invoking classifiers, which in turn
93	  select classes of this queuing discipline.  Each class maps
94	  the flow(s) it is handling to a given virtual circuit.
95
96	  See the top of <file:net/sched/sch_atm.c> for more details.
97
98	  To compile this code as a module, choose M here: the
99	  module will be called sch_atm.
100
101config NET_SCH_PRIO
102	tristate "Multi Band Priority Queueing (PRIO)"
103	---help---
104	  Say Y here if you want to use an n-band priority queue packet
105	  scheduler.
106
107	  To compile this code as a module, choose M here: the
108	  module will be called sch_prio.
109
110config NET_SCH_MULTIQ
111	tristate "Hardware Multiqueue-aware Multi Band Queuing (MULTIQ)"
112	---help---
113	  Say Y here if you want to use an n-band queue packet scheduler
114	  to support devices that have multiple hardware transmit queues.
115
116	  To compile this code as a module, choose M here: the
117	  module will be called sch_multiq.
118
119config NET_SCH_RED
120	tristate "Random Early Detection (RED)"
121	---help---
122	  Say Y here if you want to use the Random Early Detection (RED)
123	  packet scheduling algorithm.
124
125	  See the top of <file:net/sched/sch_red.c> for more details.
126
127	  To compile this code as a module, choose M here: the
128	  module will be called sch_red.
129
130config NET_SCH_SFB
131	tristate "Stochastic Fair Blue (SFB)"
132	---help---
133	  Say Y here if you want to use the Stochastic Fair Blue (SFB)
134	  packet scheduling algorithm.
135
136	  See the top of <file:net/sched/sch_sfb.c> for more details.
137
138	  To compile this code as a module, choose M here: the
139	  module will be called sch_sfb.
140
141config NET_SCH_SFQ
142	tristate "Stochastic Fairness Queueing (SFQ)"
143	---help---
144	  Say Y here if you want to use the Stochastic Fairness Queueing (SFQ)
145	  packet scheduling algorithm.
146
147	  See the top of <file:net/sched/sch_sfq.c> for more details.
148
149	  To compile this code as a module, choose M here: the
150	  module will be called sch_sfq.
151
152config NET_SCH_TEQL
153	tristate "True Link Equalizer (TEQL)"
154	---help---
155	  Say Y here if you want to use the True Link Equalizer (TLE) packet
156	  scheduling algorithm. This queueing discipline allows the combination
157	  of several physical devices into one virtual device.
158
159	  See the top of <file:net/sched/sch_teql.c> for more details.
160
161	  To compile this code as a module, choose M here: the
162	  module will be called sch_teql.
163
164config NET_SCH_TBF
165	tristate "Token Bucket Filter (TBF)"
166	---help---
167	  Say Y here if you want to use the Token Bucket Filter (TBF) packet
168	  scheduling algorithm.
169
170	  See the top of <file:net/sched/sch_tbf.c> for more details.
171
172	  To compile this code as a module, choose M here: the
173	  module will be called sch_tbf.
174
175config NET_SCH_CBS
176	tristate "Credit Based Shaper (CBS)"
177	---help---
178	  Say Y here if you want to use the Credit Based Shaper (CBS) packet
179	  scheduling algorithm.
180
181	  See the top of <file:net/sched/sch_cbs.c> for more details.
182
183	  To compile this code as a module, choose M here: the
184	  module will be called sch_cbs.
185
186config NET_SCH_ETF
187	tristate "Earliest TxTime First (ETF)"
188	help
189	  Say Y here if you want to use the Earliest TxTime First (ETF) packet
190	  scheduling algorithm.
191
192	  See the top of <file:net/sched/sch_etf.c> for more details.
193
194	  To compile this code as a module, choose M here: the
195	  module will be called sch_etf.
196
197config NET_SCH_TAPRIO
198	tristate "Time Aware Priority (taprio) Scheduler"
199	help
200	  Say Y here if you want to use the Time Aware Priority (taprio) packet
201	  scheduling algorithm.
202
203	  See the top of <file:net/sched/sch_taprio.c> for more details.
204
205	  To compile this code as a module, choose M here: the
206	  module will be called sch_taprio.
207
208config NET_SCH_GRED
209	tristate "Generic Random Early Detection (GRED)"
210	---help---
211	  Say Y here if you want to use the Generic Random Early Detection
212	  (GRED) packet scheduling algorithm for some of your network devices
213	  (see the top of <file:net/sched/sch_red.c> for details and
214	  references about the algorithm).
215
216	  To compile this code as a module, choose M here: the
217	  module will be called sch_gred.
218
219config NET_SCH_DSMARK
220	tristate "Differentiated Services marker (DSMARK)"
221	---help---
222	  Say Y if you want to schedule packets according to the
223	  Differentiated Services architecture proposed in RFC 2475.
224	  Technical information on this method, with pointers to associated
225	  RFCs, is available at <http://www.gta.ufrj.br/diffserv/>.
226
227	  To compile this code as a module, choose M here: the
228	  module will be called sch_dsmark.
229
230config NET_SCH_NETEM
231	tristate "Network emulator (NETEM)"
232	---help---
233	  Say Y if you want to emulate network delay, loss, and packet
234	  re-ordering. This is often useful to simulate networks when
235	  testing applications or protocols.
236
237	  To compile this driver as a module, choose M here: the module
238	  will be called sch_netem.
239
240	  If unsure, say N.
241
242config NET_SCH_DRR
243	tristate "Deficit Round Robin scheduler (DRR)"
244	help
245	  Say Y here if you want to use the Deficit Round Robin (DRR) packet
246	  scheduling algorithm.
247
248	  To compile this driver as a module, choose M here: the module
249	  will be called sch_drr.
250
251	  If unsure, say N.
252
253config NET_SCH_MQPRIO
254	tristate "Multi-queue priority scheduler (MQPRIO)"
255	help
256	  Say Y here if you want to use the Multi-queue Priority scheduler.
257	  This scheduler allows QOS to be offloaded on NICs that have support
258	  for offloading QOS schedulers.
259
260	  To compile this driver as a module, choose M here: the module will
261	  be called sch_mqprio.
262
263	  If unsure, say N.
264
265config NET_SCH_SKBPRIO
266	tristate "SKB priority queue scheduler (SKBPRIO)"
267	help
268	  Say Y here if you want to use the SKB priority queue
269	  scheduler. This schedules packets according to skb->priority,
270	  which is useful for request packets in DoS mitigation systems such
271	  as Gatekeeper.
272
273	  To compile this driver as a module, choose M here: the module will
274	  be called sch_skbprio.
275
276	  If unsure, say N.
277
278config NET_SCH_CHOKE
279	tristate "CHOose and Keep responsive flow scheduler (CHOKE)"
280	help
281	  Say Y here if you want to use the CHOKe packet scheduler (CHOose
282	  and Keep for responsive flows, CHOose and Kill for unresponsive
283	  flows). This is a variation of RED which trys to penalize flows
284	  that monopolize the queue.
285
286	  To compile this code as a module, choose M here: the
287	  module will be called sch_choke.
288
289config NET_SCH_QFQ
290	tristate "Quick Fair Queueing scheduler (QFQ)"
291	help
292	  Say Y here if you want to use the Quick Fair Queueing Scheduler (QFQ)
293	  packet scheduling algorithm.
294
295	  To compile this driver as a module, choose M here: the module
296	  will be called sch_qfq.
297
298	  If unsure, say N.
299
300config NET_SCH_CODEL
301	tristate "Controlled Delay AQM (CODEL)"
302	help
303	  Say Y here if you want to use the Controlled Delay (CODEL)
304	  packet scheduling algorithm.
305
306	  To compile this driver as a module, choose M here: the module
307	  will be called sch_codel.
308
309	  If unsure, say N.
310
311config NET_SCH_FQ_CODEL
312	tristate "Fair Queue Controlled Delay AQM (FQ_CODEL)"
313	help
314	  Say Y here if you want to use the FQ Controlled Delay (FQ_CODEL)
315	  packet scheduling algorithm.
316
317	  To compile this driver as a module, choose M here: the module
318	  will be called sch_fq_codel.
319
320	  If unsure, say N.
321
322config NET_SCH_CAKE
323	tristate "Common Applications Kept Enhanced (CAKE)"
324	help
325	  Say Y here if you want to use the Common Applications Kept Enhanced
326          (CAKE) queue management algorithm.
327
328	  To compile this driver as a module, choose M here: the module
329	  will be called sch_cake.
330
331	  If unsure, say N.
332
333config NET_SCH_FQ
334	tristate "Fair Queue"
335	help
336	  Say Y here if you want to use the FQ packet scheduling algorithm.
337
338	  FQ does flow separation, and is able to respect pacing requirements
339	  set by TCP stack into sk->sk_pacing_rate (for localy generated
340	  traffic)
341
342	  To compile this driver as a module, choose M here: the module
343	  will be called sch_fq.
344
345	  If unsure, say N.
346
347config NET_SCH_HHF
348	tristate "Heavy-Hitter Filter (HHF)"
349	help
350	  Say Y here if you want to use the Heavy-Hitter Filter (HHF)
351	  packet scheduling algorithm.
352
353	  To compile this driver as a module, choose M here: the module
354	  will be called sch_hhf.
355
356config NET_SCH_PIE
357	tristate "Proportional Integral controller Enhanced (PIE) scheduler"
358	help
359	  Say Y here if you want to use the Proportional Integral controller
360	  Enhanced scheduler packet scheduling algorithm.
361	  For more information, please see
362	  http://tools.ietf.org/html/draft-pan-tsvwg-pie-00
363
364	  To compile this driver as a module, choose M here: the module
365	  will be called sch_pie.
366
367	  If unsure, say N.
368
369config NET_SCH_INGRESS
370	tristate "Ingress/classifier-action Qdisc"
371	depends on NET_CLS_ACT
372	select NET_INGRESS
373	select NET_EGRESS
374	---help---
375	  Say Y here if you want to use classifiers for incoming and/or outgoing
376	  packets. This qdisc doesn't do anything else besides running classifiers,
377	  which can also have actions attached to them. In case of outgoing packets,
378	  classifiers that this qdisc holds are executed in the transmit path
379	  before real enqueuing to an egress qdisc happens.
380
381	  If unsure, say Y.
382
383	  To compile this code as a module, choose M here: the module will be
384	  called sch_ingress with alias of sch_clsact.
385
386config NET_SCH_PLUG
387	tristate "Plug network traffic until release (PLUG)"
388	---help---
389
390	  This queuing discipline allows userspace to plug/unplug a network
391	  output queue, using the netlink interface.  When it receives an
392	  enqueue command it inserts a plug into the outbound queue that
393	  causes following packets to enqueue until a dequeue command arrives
394	  over netlink, causing the plug to be removed and resuming the normal
395	  packet flow.
396
397	  This module also provides a generic "network output buffering"
398	  functionality (aka output commit), wherein upon arrival of a dequeue
399	  command, only packets up to the first plug are released for delivery.
400	  The Remus HA project uses this module to enable speculative execution
401	  of virtual machines by allowing the generated network output to be rolled
402	  back if needed.
403
404	  For more information, please refer to <http://wiki.xenproject.org/wiki/Remus>
405
406	  Say Y here if you are using this kernel for Xen dom0 and
407	  want to protect Xen guests with Remus.
408
409	  To compile this code as a module, choose M here: the
410	  module will be called sch_plug.
411
412menuconfig NET_SCH_DEFAULT
413	bool "Allow override default queue discipline"
414	---help---
415	  Support for selection of default queuing discipline.
416
417	  Nearly all users can safely say no here, and the default
418	  of pfifo_fast will be used. Many distributions already set
419	  the default value via /proc/sys/net/core/default_qdisc.
420
421	  If unsure, say N.
422
423if NET_SCH_DEFAULT
424
425choice
426	prompt "Default queuing discipline"
427	default DEFAULT_PFIFO_FAST
428	help
429	  Select the queueing discipline that will be used by default
430	  for all network devices.
431
432	config DEFAULT_FQ
433		bool "Fair Queue" if NET_SCH_FQ
434
435	config DEFAULT_CODEL
436		bool "Controlled Delay" if NET_SCH_CODEL
437
438	config DEFAULT_FQ_CODEL
439		bool "Fair Queue Controlled Delay" if NET_SCH_FQ_CODEL
440
441	config DEFAULT_SFQ
442		bool "Stochastic Fair Queue" if NET_SCH_SFQ
443
444	config DEFAULT_PFIFO_FAST
445		bool "Priority FIFO Fast"
446endchoice
447
448config DEFAULT_NET_SCH
449	string
450	default "pfifo_fast" if DEFAULT_PFIFO_FAST
451	default "fq" if DEFAULT_FQ
452	default "fq_codel" if DEFAULT_FQ_CODEL
453	default "sfq" if DEFAULT_SFQ
454	default "pfifo_fast"
455endif
456
457comment "Classification"
458
459config NET_CLS
460	bool
461
462config NET_CLS_BASIC
463	tristate "Elementary classification (BASIC)"
464	select NET_CLS
465	---help---
466	  Say Y here if you want to be able to classify packets using
467	  only extended matches and actions.
468
469	  To compile this code as a module, choose M here: the
470	  module will be called cls_basic.
471
472config NET_CLS_TCINDEX
473	tristate "Traffic-Control Index (TCINDEX)"
474	select NET_CLS
475	---help---
476	  Say Y here if you want to be able to classify packets based on
477	  traffic control indices. You will want this feature if you want
478	  to implement Differentiated Services together with DSMARK.
479
480	  To compile this code as a module, choose M here: the
481	  module will be called cls_tcindex.
482
483config NET_CLS_ROUTE4
484	tristate "Routing decision (ROUTE)"
485	depends on INET
486	select IP_ROUTE_CLASSID
487	select NET_CLS
488	---help---
489	  If you say Y here, you will be able to classify packets
490	  according to the route table entry they matched.
491
492	  To compile this code as a module, choose M here: the
493	  module will be called cls_route.
494
495config NET_CLS_FW
496	tristate "Netfilter mark (FW)"
497	select NET_CLS
498	---help---
499	  If you say Y here, you will be able to classify packets
500	  according to netfilter/firewall marks.
501
502	  To compile this code as a module, choose M here: the
503	  module will be called cls_fw.
504
505config NET_CLS_U32
506	tristate "Universal 32bit comparisons w/ hashing (U32)"
507	select NET_CLS
508	---help---
509	  Say Y here to be able to classify packets using a universal
510	  32bit pieces based comparison scheme.
511
512	  To compile this code as a module, choose M here: the
513	  module will be called cls_u32.
514
515config CLS_U32_PERF
516	bool "Performance counters support"
517	depends on NET_CLS_U32
518	---help---
519	  Say Y here to make u32 gather additional statistics useful for
520	  fine tuning u32 classifiers.
521
522config CLS_U32_MARK
523	bool "Netfilter marks support"
524	depends on NET_CLS_U32
525	---help---
526	  Say Y here to be able to use netfilter marks as u32 key.
527
528config NET_CLS_RSVP
529	tristate "IPv4 Resource Reservation Protocol (RSVP)"
530	select NET_CLS
531	---help---
532	  The Resource Reservation Protocol (RSVP) permits end systems to
533	  request a minimum and maximum data flow rate for a connection; this
534	  is important for real time data such as streaming sound or video.
535
536	  Say Y here if you want to be able to classify outgoing packets based
537	  on their RSVP requests.
538
539	  To compile this code as a module, choose M here: the
540	  module will be called cls_rsvp.
541
542config NET_CLS_RSVP6
543	tristate "IPv6 Resource Reservation Protocol (RSVP6)"
544	select NET_CLS
545	---help---
546	  The Resource Reservation Protocol (RSVP) permits end systems to
547	  request a minimum and maximum data flow rate for a connection; this
548	  is important for real time data such as streaming sound or video.
549
550	  Say Y here if you want to be able to classify outgoing packets based
551	  on their RSVP requests and you are using the IPv6 protocol.
552
553	  To compile this code as a module, choose M here: the
554	  module will be called cls_rsvp6.
555
556config NET_CLS_FLOW
557	tristate "Flow classifier"
558	select NET_CLS
559	---help---
560	  If you say Y here, you will be able to classify packets based on
561	  a configurable combination of packet keys. This is mostly useful
562	  in combination with SFQ.
563
564	  To compile this code as a module, choose M here: the
565	  module will be called cls_flow.
566
567config NET_CLS_CGROUP
568	tristate "Control Group Classifier"
569	select NET_CLS
570	select CGROUP_NET_CLASSID
571	depends on CGROUPS
572	---help---
573	  Say Y here if you want to classify packets based on the control
574	  cgroup of their process.
575
576	  To compile this code as a module, choose M here: the
577	  module will be called cls_cgroup.
578
579config NET_CLS_BPF
580	tristate "BPF-based classifier"
581	select NET_CLS
582	---help---
583	  If you say Y here, you will be able to classify packets based on
584	  programmable BPF (JIT'ed) filters as an alternative to ematches.
585
586	  To compile this code as a module, choose M here: the module will
587	  be called cls_bpf.
588
589config NET_CLS_FLOWER
590	tristate "Flower classifier"
591	select NET_CLS
592	---help---
593	  If you say Y here, you will be able to classify packets based on
594	  a configurable combination of packet keys and masks.
595
596	  To compile this code as a module, choose M here: the module will
597	  be called cls_flower.
598
599config NET_CLS_MATCHALL
600	tristate "Match-all classifier"
601	select NET_CLS
602	---help---
603	  If you say Y here, you will be able to classify packets based on
604	  nothing. Every packet will match.
605
606	  To compile this code as a module, choose M here: the module will
607	  be called cls_matchall.
608
609config NET_EMATCH
610	bool "Extended Matches"
611	select NET_CLS
612	---help---
613	  Say Y here if you want to use extended matches on top of classifiers
614	  and select the extended matches below.
615
616	  Extended matches are small classification helpers not worth writing
617	  a separate classifier for.
618
619	  A recent version of the iproute2 package is required to use
620	  extended matches.
621
622config NET_EMATCH_STACK
623	int "Stack size"
624	depends on NET_EMATCH
625	default "32"
626	---help---
627	  Size of the local stack variable used while evaluating the tree of
628	  ematches. Limits the depth of the tree, i.e. the number of
629	  encapsulated precedences. Every level requires 4 bytes of additional
630	  stack space.
631
632config NET_EMATCH_CMP
633	tristate "Simple packet data comparison"
634	depends on NET_EMATCH
635	---help---
636	  Say Y here if you want to be able to classify packets based on
637	  simple packet data comparisons for 8, 16, and 32bit values.
638
639	  To compile this code as a module, choose M here: the
640	  module will be called em_cmp.
641
642config NET_EMATCH_NBYTE
643	tristate "Multi byte comparison"
644	depends on NET_EMATCH
645	---help---
646	  Say Y here if you want to be able to classify packets based on
647	  multiple byte comparisons mainly useful for IPv6 address comparisons.
648
649	  To compile this code as a module, choose M here: the
650	  module will be called em_nbyte.
651
652config NET_EMATCH_U32
653	tristate "U32 key"
654	depends on NET_EMATCH
655	---help---
656	  Say Y here if you want to be able to classify packets using
657	  the famous u32 key in combination with logic relations.
658
659	  To compile this code as a module, choose M here: the
660	  module will be called em_u32.
661
662config NET_EMATCH_META
663	tristate "Metadata"
664	depends on NET_EMATCH
665	---help---
666	  Say Y here if you want to be able to classify packets based on
667	  metadata such as load average, netfilter attributes, socket
668	  attributes and routing decisions.
669
670	  To compile this code as a module, choose M here: the
671	  module will be called em_meta.
672
673config NET_EMATCH_TEXT
674	tristate "Textsearch"
675	depends on NET_EMATCH
676	select TEXTSEARCH
677	select TEXTSEARCH_KMP
678	select TEXTSEARCH_BM
679	select TEXTSEARCH_FSM
680	---help---
681	  Say Y here if you want to be able to classify packets based on
682	  textsearch comparisons.
683
684	  To compile this code as a module, choose M here: the
685	  module will be called em_text.
686
687config NET_EMATCH_CANID
688	tristate "CAN Identifier"
689	depends on NET_EMATCH && (CAN=y || CAN=m)
690	---help---
691	  Say Y here if you want to be able to classify CAN frames based
692	  on CAN Identifier.
693
694	  To compile this code as a module, choose M here: the
695	  module will be called em_canid.
696
697config NET_EMATCH_IPSET
698	tristate "IPset"
699	depends on NET_EMATCH && IP_SET
700	---help---
701	  Say Y here if you want to be able to classify packets based on
702	  ipset membership.
703
704	  To compile this code as a module, choose M here: the
705	  module will be called em_ipset.
706
707config NET_EMATCH_IPT
708	tristate "IPtables Matches"
709	depends on NET_EMATCH && NETFILTER && NETFILTER_XTABLES
710	---help---
711	  Say Y here to be able to classify packets based on iptables
712	  matches.
713	  Current supported match is "policy" which allows packet classification
714	  based on IPsec policy that was used during decapsulation
715
716	  To compile this code as a module, choose M here: the
717	  module will be called em_ipt.
718
719config NET_CLS_ACT
720	bool "Actions"
721	select NET_CLS
722	---help---
723	  Say Y here if you want to use traffic control actions. Actions
724	  get attached to classifiers and are invoked after a successful
725	  classification. They are used to overwrite the classification
726	  result, instantly drop or redirect packets, etc.
727
728	  A recent version of the iproute2 package is required to use
729	  extended matches.
730
731config NET_ACT_POLICE
732	tristate "Traffic Policing"
733        depends on NET_CLS_ACT
734        ---help---
735	  Say Y here if you want to do traffic policing, i.e. strict
736	  bandwidth limiting. This action replaces the existing policing
737	  module.
738
739	  To compile this code as a module, choose M here: the
740	  module will be called act_police.
741
742config NET_ACT_GACT
743        tristate "Generic actions"
744        depends on NET_CLS_ACT
745        ---help---
746	  Say Y here to take generic actions such as dropping and
747	  accepting packets.
748
749	  To compile this code as a module, choose M here: the
750	  module will be called act_gact.
751
752config GACT_PROB
753        bool "Probability support"
754        depends on NET_ACT_GACT
755        ---help---
756	  Say Y here to use the generic action randomly or deterministically.
757
758config NET_ACT_MIRRED
759        tristate "Redirecting and Mirroring"
760        depends on NET_CLS_ACT
761        ---help---
762	  Say Y here to allow packets to be mirrored or redirected to
763	  other devices.
764
765	  To compile this code as a module, choose M here: the
766	  module will be called act_mirred.
767
768config NET_ACT_SAMPLE
769        tristate "Traffic Sampling"
770        depends on NET_CLS_ACT
771        select PSAMPLE
772        ---help---
773	  Say Y here to allow packet sampling tc action. The packet sample
774	  action consists of statistically choosing packets and sampling
775	  them using the psample module.
776
777	  To compile this code as a module, choose M here: the
778	  module will be called act_sample.
779
780config NET_ACT_IPT
781        tristate "IPtables targets"
782        depends on NET_CLS_ACT && NETFILTER && IP_NF_IPTABLES
783        ---help---
784	  Say Y here to be able to invoke iptables targets after successful
785	  classification.
786
787	  To compile this code as a module, choose M here: the
788	  module will be called act_ipt.
789
790config NET_ACT_NAT
791        tristate "Stateless NAT"
792        depends on NET_CLS_ACT
793        ---help---
794	  Say Y here to do stateless NAT on IPv4 packets.  You should use
795	  netfilter for NAT unless you know what you are doing.
796
797	  To compile this code as a module, choose M here: the
798	  module will be called act_nat.
799
800config NET_ACT_PEDIT
801        tristate "Packet Editing"
802        depends on NET_CLS_ACT
803        ---help---
804	  Say Y here if you want to mangle the content of packets.
805
806	  To compile this code as a module, choose M here: the
807	  module will be called act_pedit.
808
809config NET_ACT_SIMP
810        tristate "Simple Example (Debug)"
811        depends on NET_CLS_ACT
812        ---help---
813	  Say Y here to add a simple action for demonstration purposes.
814	  It is meant as an example and for debugging purposes. It will
815	  print a configured policy string followed by the packet count
816	  to the console for every packet that passes by.
817
818	  If unsure, say N.
819
820	  To compile this code as a module, choose M here: the
821	  module will be called act_simple.
822
823config NET_ACT_SKBEDIT
824        tristate "SKB Editing"
825        depends on NET_CLS_ACT
826        ---help---
827	  Say Y here to change skb priority or queue_mapping settings.
828
829	  If unsure, say N.
830
831	  To compile this code as a module, choose M here: the
832	  module will be called act_skbedit.
833
834config NET_ACT_CSUM
835        tristate "Checksum Updating"
836        depends on NET_CLS_ACT && INET
837        select LIBCRC32C
838        ---help---
839	  Say Y here to update some common checksum after some direct
840	  packet alterations.
841
842	  To compile this code as a module, choose M here: the
843	  module will be called act_csum.
844
845config NET_ACT_VLAN
846        tristate "Vlan manipulation"
847        depends on NET_CLS_ACT
848        ---help---
849	  Say Y here to push or pop vlan headers.
850
851	  If unsure, say N.
852
853	  To compile this code as a module, choose M here: the
854	  module will be called act_vlan.
855
856config NET_ACT_BPF
857        tristate "BPF based action"
858        depends on NET_CLS_ACT
859        ---help---
860	  Say Y here to execute BPF code on packets. The BPF code will decide
861	  if the packet should be dropped or not.
862
863	  If unsure, say N.
864
865	  To compile this code as a module, choose M here: the
866	  module will be called act_bpf.
867
868config NET_ACT_CONNMARK
869        tristate "Netfilter Connection Mark Retriever"
870        depends on NET_CLS_ACT && NETFILTER && IP_NF_IPTABLES
871        depends on NF_CONNTRACK && NF_CONNTRACK_MARK
872        ---help---
873	  Say Y here to allow retrieving of conn mark
874
875	  If unsure, say N.
876
877	  To compile this code as a module, choose M here: the
878	  module will be called act_connmark.
879
880config NET_ACT_SKBMOD
881        tristate "skb data modification action"
882        depends on NET_CLS_ACT
883        ---help---
884         Say Y here to allow modification of skb data
885
886         If unsure, say N.
887
888         To compile this code as a module, choose M here: the
889         module will be called act_skbmod.
890
891config NET_ACT_IFE
892        tristate "Inter-FE action based on IETF ForCES InterFE LFB"
893        depends on NET_CLS_ACT
894        select NET_IFE
895        ---help---
896	  Say Y here to allow for sourcing and terminating metadata
897	  For details refer to netdev01 paper:
898	  "Distributing Linux Traffic Control Classifier-Action Subsystem"
899	   Authors: Jamal Hadi Salim and Damascene M. Joachimpillai
900
901	  To compile this code as a module, choose M here: the
902	  module will be called act_ife.
903
904config NET_ACT_TUNNEL_KEY
905        tristate "IP tunnel metadata manipulation"
906        depends on NET_CLS_ACT
907        ---help---
908	  Say Y here to set/release ip tunnel metadata.
909
910	  If unsure, say N.
911
912	  To compile this code as a module, choose M here: the
913	  module will be called act_tunnel_key.
914
915config NET_IFE_SKBMARK
916        tristate "Support to encoding decoding skb mark on IFE action"
917        depends on NET_ACT_IFE
918
919config NET_IFE_SKBPRIO
920        tristate "Support to encoding decoding skb prio on IFE action"
921        depends on NET_ACT_IFE
922
923config NET_IFE_SKBTCINDEX
924        tristate "Support to encoding decoding skb tcindex on IFE action"
925        depends on NET_ACT_IFE
926
927config NET_CLS_IND
928	bool "Incoming device classification"
929	depends on NET_CLS_U32 || NET_CLS_FW
930	---help---
931	  Say Y here to extend the u32 and fw classifier to support
932	  classification based on the incoming device. This option is
933	  likely to disappear in favour of the metadata ematch.
934
935endif # NET_SCHED
936
937config NET_SCH_FIFO
938	bool
939