11da177e4SLinus Torvalds# 21da177e4SLinus Torvalds# XFRM configuration 31da177e4SLinus Torvalds# 46a2e9b73SSam Ravnborgconfig XFRM 56a2e9b73SSam Ravnborg bool 6e54d1527SFlorian Westphal depends on INET 797e219b7SEric Dumazet select GRO_CELLS 8a84e3f53SFlorian Westphal select SKB_EXTENSIONS 96a2e9b73SSam Ravnborg 1025393d3fSSteffen Klassertconfig XFRM_OFFLOAD 1125393d3fSSteffen Klassert bool 1225393d3fSSteffen Klassert 137e152524SJan Beulichconfig XFRM_ALGO 147e152524SJan Beulich tristate 157e152524SJan Beulich select XFRM 167e152524SJan Beulich select CRYPTO 17597179b0SArnd Bergmann select CRYPTO_HASH 18597179b0SArnd Bergmann select CRYPTO_BLKCIPHER 197e152524SJan Beulich 20e54d1527SFlorian Westphalif INET 211da177e4SLinus Torvaldsconfig XFRM_USER 22654b32c6SMasahide NAKAMURA tristate "Transformation user configuration interface" 237e152524SJan Beulich select XFRM_ALGO 241da177e4SLinus Torvalds ---help--- 25654b32c6SMasahide NAKAMURA Support for Transformation(XFRM) user configuration interface 26654b32c6SMasahide NAKAMURA like IPsec used by native Linux tools. 271da177e4SLinus Torvalds 281da177e4SLinus Torvalds If unsure, say Y. 291da177e4SLinus Torvalds 30f203b76dSSteffen Klassertconfig XFRM_INTERFACE 31f203b76dSSteffen Klassert tristate "Transformation virtual interface" 32f203b76dSSteffen Klassert depends on XFRM && IPV6 33f203b76dSSteffen Klassert ---help--- 34f203b76dSSteffen Klassert This provides a virtual interface to route IPsec traffic. 35f203b76dSSteffen Klassert 36f203b76dSSteffen Klassert If unsure, say N. 37f203b76dSSteffen Klassert 38c11f1a15SMasahide NAKAMURAconfig XFRM_SUB_POLICY 39f215bf48SKees Cook bool "Transformation sub policy support" 40f215bf48SKees Cook depends on XFRM 41c11f1a15SMasahide NAKAMURA ---help--- 42c11f1a15SMasahide NAKAMURA Support sub policy for developers. By using sub policy with main 43c11f1a15SMasahide NAKAMURA one, two policies can be applied to the same packet at once. 44c11f1a15SMasahide NAKAMURA Policy which lives shorter time in kernel should be a sub. 45c11f1a15SMasahide NAKAMURA 46c11f1a15SMasahide NAKAMURA If unsure, say N. 47c11f1a15SMasahide NAKAMURA 48d0473655SShinta Sugimotoconfig XFRM_MIGRATE 49f215bf48SKees Cook bool "Transformation migrate database" 50f215bf48SKees Cook depends on XFRM 51d0473655SShinta Sugimoto ---help--- 52d0473655SShinta Sugimoto A feature to update locator(s) of a given IPsec security 53d0473655SShinta Sugimoto association dynamically. This feature is required, for 54d0473655SShinta Sugimoto instance, in a Mobile IPv6 environment with IPsec configuration 55d0473655SShinta Sugimoto where mobile nodes change their attachment point to the Internet. 56d0473655SShinta Sugimoto 57d0473655SShinta Sugimoto If unsure, say N. 58d0473655SShinta Sugimoto 598ea84349SMasahide NAKAMURAconfig XFRM_STATISTICS 60f215bf48SKees Cook bool "Transformation statistics" 61e54d1527SFlorian Westphal depends on XFRM && PROC_FS 628ea84349SMasahide NAKAMURA ---help--- 638ea84349SMasahide NAKAMURA This statistics is not a SNMP/MIB specification but shows 648ea84349SMasahide NAKAMURA statistics about transformation error (or almost error) factor 658ea84349SMasahide NAKAMURA at packet processing for developer. 668ea84349SMasahide NAKAMURA 678ea84349SMasahide NAKAMURA If unsure, say N. 688ea84349SMasahide NAKAMURA 696fccab67SHerbert Xuconfig XFRM_IPCOMP 706fccab67SHerbert Xu tristate 717e152524SJan Beulich select XFRM_ALGO 726fccab67SHerbert Xu select CRYPTO 736fccab67SHerbert Xu select CRYPTO_DEFLATE 746fccab67SHerbert Xu 756a2e9b73SSam Ravnborgconfig NET_KEY 766a2e9b73SSam Ravnborg tristate "PF_KEY sockets" 777e152524SJan Beulich select XFRM_ALGO 786a2e9b73SSam Ravnborg ---help--- 796a2e9b73SSam Ravnborg PF_KEYv2 socket family, compatible to KAME ones. 806a2e9b73SSam Ravnborg They are required if you are going to use IPsec tools ported 816a2e9b73SSam Ravnborg from KAME. 826a2e9b73SSam Ravnborg 836a2e9b73SSam Ravnborg Say Y unless you know what you are doing. 846a2e9b73SSam Ravnborg 85f6ed0ec0SShinta Sugimotoconfig NET_KEY_MIGRATE 86f215bf48SKees Cook bool "PF_KEY MIGRATE" 87f215bf48SKees Cook depends on NET_KEY 88f6ed0ec0SShinta Sugimoto select XFRM_MIGRATE 89f6ed0ec0SShinta Sugimoto ---help--- 90f6ed0ec0SShinta Sugimoto Add a PF_KEY MIGRATE message to PF_KEYv2 socket family. 91f6ed0ec0SShinta Sugimoto The PF_KEY MIGRATE message is used to dynamically update 92f6ed0ec0SShinta Sugimoto locator(s) of a given IPsec security association. 93f6ed0ec0SShinta Sugimoto This feature is required, for instance, in a Mobile IPv6 94f6ed0ec0SShinta Sugimoto environment with IPsec configuration where mobile nodes 95f6ed0ec0SShinta Sugimoto change their attachment point to the Internet. Detail 96f6ed0ec0SShinta Sugimoto information can be found in the internet-draft 97f6ed0ec0SShinta Sugimoto <draft-sugimoto-mip6-pfkey-migrate>. 98f6ed0ec0SShinta Sugimoto 99f6ed0ec0SShinta Sugimoto If unsure, say N. 100e54d1527SFlorian Westphal 101e54d1527SFlorian Westphalendif # INET 102