Blame view
net/Kconfig
13.2 KB
1da177e4c Linux-2.6.12-rc2 |
1 2 3 |
# # Network configuration # |
031cf19e6 net: Make "networ... |
4 |
menuconfig NET |
1da177e4c Linux-2.6.12-rc2 |
5 |
bool "Networking support" |
e9cc8bdda netlink: Move net... |
6 |
select NLATTR |
4cd5773a2 net: core: move m... |
7 |
select GENERIC_NET_UTILS |
f89b7755f bpf: split eBPF o... |
8 |
select BPF |
1da177e4c Linux-2.6.12-rc2 |
9 10 11 12 |
---help--- Unless you really know what you are doing, you should say Y here. The reason is that some programs need kernel networking support even when running on a stand-alone machine that isn't connected to any |
d5950b435 [NET]: add a top-... |
13 14 15 |
other computer. If you are upgrading from an older kernel, you |
1da177e4c Linux-2.6.12-rc2 |
16 17 18 19 20 21 22 23 |
should consider updating your networking tools too because changes in the kernel and the tools often go hand in hand. The tools are contained in the package net-tools, the location and version number of which are given in <file:Documentation/Changes>. For a general introduction to Linux networking, it is highly recommended to read the NET-HOWTO, available from <http://www.tldp.org/docs.html#howto>. |
6a2e9b738 [NET]: move confi... |
24 |
if NET |
1da177e4c Linux-2.6.12-rc2 |
25 |
|
1dacc76d0 net/compat/wext: ... |
26 27 28 29 30 31 32 33 34 |
config WANT_COMPAT_NETLINK_MESSAGES bool help This option can be selected by other options that need compat netlink messages. config COMPAT_NETLINK_MESSAGES def_bool y depends on COMPAT |
40b53d8a4 wireless: Make CO... |
35 |
depends on WEXT_CORE || WANT_COMPAT_NETLINK_MESSAGES |
1dacc76d0 net/compat/wext: ... |
36 37 38 39 40 41 42 43 44 |
help This option makes it possible to send different netlink messages to tasks depending on whether the task is a compat task or not. To achieve this, you need to set skb_shinfo(skb)->frag_list to the compat skb before sending the skb, the netlink code will sort out which message to actually pass to the task. Newly written code should NEVER need this option but do compat-independent messages instead! |
1cf51900f net: add CONFIG_N... |
45 46 |
config NET_INGRESS bool |
1f211a1b9 net, sched: add c... |
47 48 |
config NET_EGRESS bool |
6a2e9b738 [NET]: move confi... |
49 |
menu "Networking options" |
1da177e4c Linux-2.6.12-rc2 |
50 |
|
6a2e9b738 [NET]: move confi... |
51 52 53 |
source "net/packet/Kconfig" source "net/unix/Kconfig" source "net/xfrm/Kconfig" |
2356f4cb1 [S390]: Rewrite o... |
54 |
source "net/iucv/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
55 56 57 |
config INET bool "TCP/IP networking" |
798b2cbf9 net: Add INET dep... |
58 59 |
select CRYPTO select CRYPTO_AES |
1da177e4c Linux-2.6.12-rc2 |
60 61 62 |
---help--- These are the protocols used on the Internet and on most local Ethernets. It is highly recommended to say Y here (this will enlarge |
cf80efc27 [IPV4]: Fix size ... |
63 |
your kernel by about 400 KB), since some programs (e.g. the X window |
1da177e4c Linux-2.6.12-rc2 |
64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 |
system) use TCP/IP even if your machine is not connected to any other computer. You will get the so-called loopback device which allows you to ping yourself (great fun, that!). For an excellent introduction to Linux networking, please read the Linux Networking HOWTO, available from <http://www.tldp.org/docs.html#howto>. If you say Y here and also to "/proc file system support" and "Sysctl support" below, you can change various aspects of the behavior of the TCP/IP code by writing to the (virtual) files in /proc/sys/net/ipv4/*; the options are explained in the file <file:Documentation/networking/ip-sysctl.txt>. Short answer: say Y. |
6a2e9b738 [NET]: move confi... |
79 |
if INET |
1da177e4c Linux-2.6.12-rc2 |
80 |
source "net/ipv4/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
81 |
source "net/ipv6/Kconfig" |
38c94377a [NETLABEL]: Fix b... |
82 |
source "net/netlabel/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
83 |
|
6a2e9b738 [NET]: move confi... |
84 |
endif # if INET |
984bc16cc [SECMARK]: Add se... |
85 86 87 88 89 90 |
config NETWORK_SECMARK bool "Security Marking" help This enables security marking of network packets, similar to nfmark, but designated for security purposes. If you are unsure how to answer this question, answer N. |
408eccce3 net: ptp: move PT... |
91 92 |
config NET_PTP_CLASSIFY def_bool n |
c1f19b51d net: support time... |
93 94 |
config NETWORK_PHY_TIMESTAMPING bool "Timestamping in PHY devices" |
408eccce3 net: ptp: move PT... |
95 |
select NET_PTP_CLASSIFY |
c1f19b51d net: support time... |
96 97 98 99 100 101 |
help This allows timestamping of network packets by PHYs with hardware timestamping capabilities. This option adds some overhead in the transmit and receive paths. If you are unsure how to answer this question, answer N. |
1da177e4c Linux-2.6.12-rc2 |
102 |
menuconfig NETFILTER |
ef91fd522 [NETFILTER]: remo... |
103 |
bool "Network packet filtering framework (Netfilter)" |
1da177e4c Linux-2.6.12-rc2 |
104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 |
---help--- Netfilter is a framework for filtering and mangling network packets that pass through your Linux box. The most common use of packet filtering is to run your Linux box as a firewall protecting a local network from the Internet. The type of firewall provided by this kernel support is called a "packet filter", which means that it can reject individual network packets based on type, source, destination etc. The other kind of firewall, a "proxy-based" one, is more secure but more intrusive and more bothersome to set up; it inspects the network traffic much more closely, modifies it and has knowledge about the higher level protocols, which a packet filter lacks. Moreover, proxy-based firewalls often require changes to the programs running on the local clients. Proxy-based firewalls don't need support by the kernel, but they are often combined with a packet filter, which only works if you say Y here. You should also say Y here if you intend to use your Linux box as the gateway to the Internet for a local network of machines without globally valid IP addresses. This is called "masquerading": if one of the computers on your local network wants to send something to the outside, your box can "masquerade" as that computer, i.e. it forwards the traffic to the intended outside destination, but modifies the packets to make it look like they came from the firewall box itself. It works both ways: if the outside host replies, the Linux box will silently forward the traffic to the correct local computer. This way, the computers on your local net are completely invisible to the outside world, even though they can reach the outside and can receive replies. It is even possible to run globally visible servers from within a masqueraded local network using a mechanism called portforwarding. Masquerading is also often called NAT (Network Address Translation). Another use of Netfilter is in transparent proxying: if a machine on the local network tries to connect to an outside host, your Linux box can transparently forward the traffic to a local server, typically a caching proxy server. Yet another use of Netfilter is building a bridging firewall. Using a bridge with Network packet filtering enabled makes iptables "see" the bridged traffic. For filtering on the lower network and Ethernet protocols over the bridge, use ebtables (under bridge netfilter configuration). Various modules exist for netfilter which replace the previous masquerading (ipmasqadm), packet filtering (ipchains), transparent proxying, and portforwarding mechanisms. Please see <file:Documentation/Changes> under "iptables" for the location of these packages. |
1da177e4c Linux-2.6.12-rc2 |
154 155 156 157 158 159 160 161 |
if NETFILTER config NETFILTER_DEBUG bool "Network packet filtering debugging" depends on NETFILTER help You can say Y here if you want to get additional messages useful in debugging the netfilter code. |
33b8e7760 [NETFILTER]: Add ... |
162 163 164 165 166 167 |
config NETFILTER_ADVANCED bool "Advanced netfilter configuration" depends on NETFILTER default y help If you say Y here you can select between all the netfilter modules. |
692105b8a trivial: fix typo... |
168 |
If you say N the more unusual ones will not be shown and the |
33b8e7760 [NETFILTER]: Add ... |
169 170 171 |
basic ones needed by most people will default to 'M'. If unsure, say Y. |
1da177e4c Linux-2.6.12-rc2 |
172 |
config BRIDGE_NETFILTER |
34666d467 netfilter: bridge... |
173 |
tristate "Bridged IP/ARP packets filtering" |
57f5877c1 netfilter: bridge... |
174 |
depends on BRIDGE |
34666d467 netfilter: bridge... |
175 |
depends on NETFILTER && INET |
33b8e7760 [NETFILTER]: Add ... |
176 |
depends on NETFILTER_ADVANCED |
34666d467 netfilter: bridge... |
177 |
default m |
1da177e4c Linux-2.6.12-rc2 |
178 179 180 181 182 183 184 185 |
---help--- Enabling this option will let arptables resp. iptables see bridged ARP resp. IP traffic. If you want a bridging firewall, you probably want this option enabled. Enabling or disabling this option doesn't enable or disable ebtables. If unsure, say N. |
9eb0eec74 [NETFILTER] move ... |
186 |
source "net/netfilter/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
187 188 189 190 191 192 |
source "net/ipv4/netfilter/Kconfig" source "net/ipv6/netfilter/Kconfig" source "net/decnet/netfilter/Kconfig" source "net/bridge/netfilter/Kconfig" endif |
7c657876b [DCCP]: Initial i... |
193 |
source "net/dccp/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
194 |
source "net/sctp/Kconfig" |
fe17f84f5 RDS: Kconfig and ... |
195 |
source "net/rds/Kconfig" |
1e63e681e [TIPC] Group prot... |
196 |
source "net/tipc/Kconfig" |
6a2e9b738 [NET]: move confi... |
197 |
source "net/atm/Kconfig" |
fd558d186 l2tp: Split pppol... |
198 |
source "net/l2tp/Kconfig" |
a19800d70 net: Add STP demu... |
199 |
source "net/802/Kconfig" |
6a2e9b738 [NET]: move confi... |
200 |
source "net/bridge/Kconfig" |
91da11f87 net: Distributed ... |
201 |
source "net/dsa/Kconfig" |
6a2e9b738 [NET]: move confi... |
202 |
source "net/8021q/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
203 |
source "net/decnet/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
204 |
source "net/llc/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
205 |
source "net/ipx/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
206 |
source "drivers/net/appletalk/Kconfig" |
6a2e9b738 [NET]: move confi... |
207 208 |
source "net/x25/Kconfig" source "net/lapb/Kconfig" |
5075138d6 Phonet: move to N... |
209 |
source "net/phonet/Kconfig" |
2c6bed7cf 6lowpan: introduc... |
210 |
source "net/6lowpan/Kconfig" |
9ec767160 net: add IEEE 802... |
211 |
source "net/ieee802154/Kconfig" |
1010f5401 mac802154: alloca... |
212 |
source "net/mac802154/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
213 |
source "net/sched/Kconfig" |
2f90b8657 ixgbe: this patch... |
214 |
source "net/dcb/Kconfig" |
1a4240f47 DNS: Separate out... |
215 |
source "net/dns_resolver/Kconfig" |
c6c8fea29 net: Add batman-a... |
216 |
source "net/batman-adv/Kconfig" |
ccb1352e7 net: Add Open vSw... |
217 |
source "net/openvswitch/Kconfig" |
d021c3440 VSOCK: Introduce ... |
218 |
source "net/vmw_vsock/Kconfig" |
eaaa31392 netlink: Diag cor... |
219 |
source "net/netlink/Kconfig" |
0d89d2035 MPLS: Add limited... |
220 |
source "net/mpls/Kconfig" |
f421436a5 net/hsr: Add supp... |
221 |
source "net/hsr/Kconfig" |
007f790c8 net: introduce ge... |
222 |
source "net/switchdev/Kconfig" |
1b69c6d0a net: Introduce L3... |
223 |
source "net/l3mdev/Kconfig" |
bdabad3e3 net: Add Qualcomm... |
224 |
source "net/qrtr/Kconfig" |
2d283bdd0 net/ncsi: Resourc... |
225 |
source "net/ncsi/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
226 |
|
df3345457 rps: add CONFIG_RPS |
227 |
config RPS |
6341e62b2 kconfig: use bool... |
228 |
bool |
044c8d4b1 kernel: remove CO... |
229 |
depends on SMP && SYSFS |
df3345457 rps: add CONFIG_RPS |
230 |
default y |
c445477d7 net: RPS: Enable ... |
231 |
config RFS_ACCEL |
6341e62b2 kconfig: use bool... |
232 |
bool |
0244ad004 Remove GENERIC_HA... |
233 |
depends on RPS |
c445477d7 net: RPS: Enable ... |
234 235 |
select CPU_RMAP default y |
bf2641451 xps: Add CONFIG_XPS |
236 |
config XPS |
6341e62b2 kconfig: use bool... |
237 |
bool |
044c8d4b1 kernel: remove CO... |
238 |
depends on SMP |
bf2641451 xps: Add CONFIG_XPS |
239 |
default y |
8cb2d8bf5 net: add a hardwa... |
240 241 |
config HWBM bool |
2a56a1fec net: wrap sock->s... |
242 243 244 |
config SOCK_CGROUP_DATA bool default n |
86f8515f9 net: netprio: ren... |
245 |
config CGROUP_NET_PRIO |
af6363374 cgroup: make CONF... |
246 |
bool "Network priority cgroup" |
5bc1421e3 net: add network ... |
247 |
depends on CGROUPS |
2a56a1fec net: wrap sock->s... |
248 |
select SOCK_CGROUP_DATA |
5bc1421e3 net: add network ... |
249 250 |
---help--- Cgroup subsystem for use in assigning processes to network priorities on |
86f8515f9 net: netprio: ren... |
251 |
a per-interface basis. |
5bc1421e3 net: add network ... |
252 |
|
fe1217c4f net: net_cls: mov... |
253 |
config CGROUP_NET_CLASSID |
6341e62b2 kconfig: use bool... |
254 |
bool "Network classid cgroup" |
fe1217c4f net: net_cls: mov... |
255 |
depends on CGROUPS |
2a56a1fec net: wrap sock->s... |
256 |
select SOCK_CGROUP_DATA |
fe1217c4f net: net_cls: mov... |
257 258 259 |
---help--- Cgroup subsystem for use as general purpose socket classid marker that is being used in cls_cgroup and for netfilter matching. |
e0d1095ae net: rename CONFI... |
260 |
config NET_RX_BUSY_POLL |
6341e62b2 kconfig: use bool... |
261 |
bool |
89bf1b5a6 net: remove NET_L... |
262 |
default y |
060212928 net: add low late... |
263 |
|
114cf5802 bql: Byte queue l... |
264 |
config BQL |
6341e62b2 kconfig: use bool... |
265 |
bool |
114cf5802 bql: Byte queue l... |
266 267 268 |
depends on SYSFS select DQL default y |
0a14842f5 net: filter: Just... |
269 270 |
config BPF_JIT bool "enable BPF Just In Time compiler" |
6077776b5 bpf: split HAVE_B... |
271 |
depends on HAVE_CBPF_JIT || HAVE_EBPF_JIT |
b6202f978 bpf: depends on M... |
272 |
depends on MODULES |
0a14842f5 net: filter: Just... |
273 274 275 276 |
---help--- Berkeley Packet Filter filtering capabilities are normally handled by an interpreter. This option allows kernel to generate a native code when filter is loaded in memory. This should speedup |
4f3446bb8 bpf: add generic ... |
277 278 279 280 281 |
packet sniffing (libpcap/tcpdump). Note, admin should enable this feature changing: /proc/sys/net/core/bpf_jit_enable /proc/sys/net/core/bpf_jit_harden (optional) |
0a14842f5 net: filter: Just... |
282 |
|
99bbc7074 rps: selective fl... |
283 |
config NET_FLOW_LIMIT |
6341e62b2 kconfig: use bool... |
284 |
bool |
99bbc7074 rps: selective fl... |
285 286 287 288 289 290 291 292 293 |
depends on RPS default y ---help--- The network stack has to drop packets when a receive processing CPU's backlog reaches netdev_max_backlog. If a few out of many active flows generate the vast majority of load, drop their traffic earlier to maintain capacity for the other flows. This feature provides servers with many clients some protection against DoS by a single (spoofed) flow that greatly exceeds average workload. |
1da177e4c Linux-2.6.12-rc2 |
294 295 296 297 |
menu "Network testing" config NET_PKTGEN tristate "Packet Generator (USE WITH CAUTION)" |
ffd756b31 pktgen: Require C... |
298 |
depends on INET && PROC_FS |
1da177e4c Linux-2.6.12-rc2 |
299 300 301 302 303 304 305 306 307 308 309 |
---help--- This module will inject preconfigured packets, at a configurable rate, out of a given interface. It is used for network interface stress testing and performance analysis. If you don't understand what was just said, you don't need it: say N. Documentation on how to use the packet generator can be found at <file:Documentation/networking/pktgen.txt>. To compile this code as a module, choose M here: the module will be called pktgen. |
a42e9d6ce [TCP]: TCP Probe ... |
310 311 |
config NET_TCPPROBE tristate "TCP connection probing" |
911f86354 net: remove depen... |
312 |
depends on INET && PROC_FS && KPROBES |
a42e9d6ce [TCP]: TCP Probe ... |
313 314 |
---help--- This module allows for capturing the changes to TCP connection |
9dadaa19c [NET]: NET_TCPPRO... |
315 |
state in response to incoming packets. It is used for debugging |
a42e9d6ce [TCP]: TCP Probe ... |
316 317 |
TCP congestion avoidance modules. If you don't understand what was just said, you don't need it: say N. |
82fe7c924 [NET] Kconfig: fi... |
318 |
Documentation on how to use TCP connection probing can be found |
c996d8b9a Docs/Kconfig: Upd... |
319 320 321 |
at: http://www.linuxfoundation.org/collaborate/workgroups/networking/tcpprobe |
a42e9d6ce [TCP]: TCP Probe ... |
322 323 324 |
To compile this code as a module, choose M here: the module will be called tcp_probe. |
273ae44b9 Network Drop Moni... |
325 |
config NET_DROP_MONITOR |
cad456d5a drop_monitor: con... |
326 |
tristate "Network packet drop alerting service" |
911f86354 net: remove depen... |
327 |
depends on INET && TRACEPOINTS |
273ae44b9 Network Drop Moni... |
328 329 330 331 332 333 334 |
---help--- This feature provides an alerting service to userspace in the event that packets are discarded in the network stack. Alerts are broadcast via netlink socket to any listening user space process. If you don't need network drop alerts, or if you are ok just checking the various proc files and other utilities for drop statistics, say N here. |
1da177e4c Linux-2.6.12-rc2 |
335 336 337 |
endmenu endmenu |
1da177e4c Linux-2.6.12-rc2 |
338 |
source "net/ax25/Kconfig" |
0d66548a1 [CAN]: Add PF_CAN... |
339 |
source "net/can/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
340 |
source "net/irda/Kconfig" |
1da177e4c Linux-2.6.12-rc2 |
341 |
source "net/bluetooth/Kconfig" |
17926a793 [AF_RXRPC]: Provi... |
342 |
source "net/rxrpc/Kconfig" |
ab7ac4eb9 kcm: Kernel Conne... |
343 |
source "net/kcm/Kconfig" |
43a0c6751 strparser: Stream... |
344 |
source "net/strparser/Kconfig" |
d86b5e0e6 [PATCH] net/: fix... |
345 |
|
14c0b97dd [NET]: Protocol I... |
346 347 |
config FIB_RULES bool |
5442060c0 WIRELESS: Make wi... |
348 349 |
menuconfig WIRELESS bool "Wireless" |
f54bfc0e3 [S390] Kconfig: n... |
350 |
depends on !S390 |
5442060c0 WIRELESS: Make wi... |
351 352 353 |
default y if WIRELESS |
2a5e1c0eb [WIRELESS]: Refac... |
354 355 |
source "net/wireless/Kconfig" |
f0706e828 [MAC80211]: Add m... |
356 |
source "net/mac80211/Kconfig" |
2a5e1c0eb [WIRELESS]: Refac... |
357 |
|
5442060c0 WIRELESS: Make wi... |
358 |
endif # WIRELESS |
2a5e1c0eb [WIRELESS]: Refac... |
359 |
|
b0c83ae1d wimax: Makefile, ... |
360 |
source "net/wimax/Kconfig" |
cf4328cd9 [NET]: rfkill: ad... |
361 |
source "net/rfkill/Kconfig" |
bd238fb43 9p: Reorganizatio... |
362 |
source "net/9p/Kconfig" |
3908c6902 net-caif: add CAI... |
363 |
source "net/caif/Kconfig" |
3d14c5d2b ceph: factor out ... |
364 |
source "net/ceph/Kconfig" |
3e256b8f8 NFC: add nfc subs... |
365 |
source "net/nfc/Kconfig" |
3908c6902 net-caif: add CAI... |
366 |
|
499a24256 lwtunnel: infrast... |
367 368 369 370 371 372 373 |
config LWTUNNEL bool "Network light weight tunnels" ---help--- This feature provides an infrastructure to support light weight tunnels like mpls. There is no netdevice associated with a light weight tunnel endpoint. Tunnel encapsulation parameters are stored with light weight tunnel state associated with fib routes. |
cf4328cd9 [NET]: rfkill: ad... |
374 |
|
911362c70 net: add dst_cach... |
375 |
config DST_CACHE |
9b246841f Make DST_CACHE a ... |
376 |
bool |
911362c70 net: add dst_cach... |
377 |
default n |
bfcd3a466 Introduce devlink... |
378 379 380 381 382 383 |
config NET_DEVLINK tristate "Network physical/parent device Netlink interface" help Network physical/parent device Netlink interface provides infrastructure to support access to physical chip-wide config and monitoring. |
3d1cbe839 net: mellanox: ad... |
384 385 386 387 388 389 390 391 |
config MAY_USE_DEVLINK tristate default m if NET_DEVLINK=m default y if NET_DEVLINK=y || NET_DEVLINK=n help Drivers using the devlink infrastructure should have a dependency on MAY_USE_DEVLINK to ensure they do not cause link errors when devlink is a loadable module and the driver using it is built-in. |
6a2e9b738 [NET]: move confi... |
392 |
endif # if NET |
e47b65b03 net: drop NET dep... |
393 |
|
6077776b5 bpf: split HAVE_B... |
394 395 396 397 398 399 400 401 402 403 |
# Used by archs to tell that they support BPF JIT compiler plus which flavour. # Only one of the two can be selected for a specific arch since eBPF JIT supersedes # the cBPF JIT. # Classic BPF JIT (cBPF) config HAVE_CBPF_JIT bool # Extended BPF JIT (eBPF) config HAVE_EBPF_JIT |
e47b65b03 net: drop NET dep... |
404 |
bool |