11da177e4SLinus Torvalds# 21da177e4SLinus Torvalds# XFRM configuration 31da177e4SLinus Torvalds# 46a2e9b73SSam Ravnborgconfig XFRM 56a2e9b73SSam Ravnborg bool 650dd7965SSebastian Siewior select CRYPTO 76a2e9b73SSam Ravnborg depends on NET 86a2e9b73SSam Ravnborg 91da177e4SLinus Torvaldsconfig XFRM_USER 10654b32c6SMasahide NAKAMURA tristate "Transformation user configuration interface" 111da177e4SLinus Torvalds depends on INET && XFRM 121da177e4SLinus Torvalds ---help--- 13654b32c6SMasahide NAKAMURA Support for Transformation(XFRM) user configuration interface 14654b32c6SMasahide NAKAMURA like IPsec used by native Linux tools. 151da177e4SLinus Torvalds 161da177e4SLinus Torvalds If unsure, say Y. 171da177e4SLinus Torvalds 18c11f1a15SMasahide NAKAMURAconfig XFRM_SUB_POLICY 19c11f1a15SMasahide NAKAMURA bool "Transformation sub policy support (EXPERIMENTAL)" 20c11f1a15SMasahide NAKAMURA depends on XFRM && EXPERIMENTAL 21c11f1a15SMasahide NAKAMURA ---help--- 22c11f1a15SMasahide NAKAMURA Support sub policy for developers. By using sub policy with main 23c11f1a15SMasahide NAKAMURA one, two policies can be applied to the same packet at once. 24c11f1a15SMasahide NAKAMURA Policy which lives shorter time in kernel should be a sub. 25c11f1a15SMasahide NAKAMURA 26c11f1a15SMasahide NAKAMURA If unsure, say N. 27c11f1a15SMasahide NAKAMURA 28d0473655SShinta Sugimotoconfig XFRM_MIGRATE 29d0473655SShinta Sugimoto bool "Transformation migrate database (EXPERIMENTAL)" 30d0473655SShinta Sugimoto depends on XFRM && EXPERIMENTAL 31d0473655SShinta Sugimoto ---help--- 32d0473655SShinta Sugimoto A feature to update locator(s) of a given IPsec security 33d0473655SShinta Sugimoto association dynamically. This feature is required, for 34d0473655SShinta Sugimoto instance, in a Mobile IPv6 environment with IPsec configuration 35d0473655SShinta Sugimoto where mobile nodes change their attachment point to the Internet. 36d0473655SShinta Sugimoto 37d0473655SShinta Sugimoto If unsure, say N. 38d0473655SShinta Sugimoto 398ea84349SMasahide NAKAMURAconfig XFRM_STATISTICS 408ea84349SMasahide NAKAMURA bool "Transformation statistics (EXPERIMENTAL)" 410f4bda00SPaul Mundt depends on INET && XFRM && PROC_FS && EXPERIMENTAL 428ea84349SMasahide NAKAMURA ---help--- 438ea84349SMasahide NAKAMURA This statistics is not a SNMP/MIB specification but shows 448ea84349SMasahide NAKAMURA statistics about transformation error (or almost error) factor 458ea84349SMasahide NAKAMURA at packet processing for developer. 468ea84349SMasahide NAKAMURA 478ea84349SMasahide NAKAMURA If unsure, say N. 488ea84349SMasahide NAKAMURA 496a2e9b73SSam Ravnborgconfig NET_KEY 506a2e9b73SSam Ravnborg tristate "PF_KEY sockets" 516a2e9b73SSam Ravnborg select XFRM 526a2e9b73SSam Ravnborg ---help--- 536a2e9b73SSam Ravnborg PF_KEYv2 socket family, compatible to KAME ones. 546a2e9b73SSam Ravnborg They are required if you are going to use IPsec tools ported 556a2e9b73SSam Ravnborg from KAME. 566a2e9b73SSam Ravnborg 576a2e9b73SSam Ravnborg Say Y unless you know what you are doing. 586a2e9b73SSam Ravnborg 59f6ed0ec0SShinta Sugimotoconfig NET_KEY_MIGRATE 60f6ed0ec0SShinta Sugimoto bool "PF_KEY MIGRATE (EXPERIMENTAL)" 61f6ed0ec0SShinta Sugimoto depends on NET_KEY && EXPERIMENTAL 62f6ed0ec0SShinta Sugimoto select XFRM_MIGRATE 63f6ed0ec0SShinta Sugimoto ---help--- 64f6ed0ec0SShinta Sugimoto Add a PF_KEY MIGRATE message to PF_KEYv2 socket family. 65f6ed0ec0SShinta Sugimoto The PF_KEY MIGRATE message is used to dynamically update 66f6ed0ec0SShinta Sugimoto locator(s) of a given IPsec security association. 67f6ed0ec0SShinta Sugimoto This feature is required, for instance, in a Mobile IPv6 68f6ed0ec0SShinta Sugimoto environment with IPsec configuration where mobile nodes 69f6ed0ec0SShinta Sugimoto change their attachment point to the Internet. Detail 70f6ed0ec0SShinta Sugimoto information can be found in the internet-draft 71f6ed0ec0SShinta Sugimoto <draft-sugimoto-mip6-pfkey-migrate>. 72f6ed0ec0SShinta Sugimoto 73f6ed0ec0SShinta Sugimoto If unsure, say N. 746a2e9b73SSam Ravnborg 75