Kconfig 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462
  1. #
  2. # Network configuration
  3. #
  4. menuconfig NET
  5. bool "Networking support"
  6. select NLATTR
  7. select GENERIC_NET_UTILS
  8. select BPF
  9. ---help---
  10. Unless you really know what you are doing, you should say Y here.
  11. The reason is that some programs need kernel networking support even
  12. when running on a stand-alone machine that isn't connected to any
  13. other computer.
  14. If you are upgrading from an older kernel, you
  15. should consider updating your networking tools too because changes
  16. in the kernel and the tools often go hand in hand. The tools are
  17. contained in the package net-tools, the location and version number
  18. of which are given in <file:Documentation/Changes>.
  19. For a general introduction to Linux networking, it is highly
  20. recommended to read the NET-HOWTO, available from
  21. <http://www.tldp.org/docs.html#howto>.
  22. if NET
  23. config WANT_COMPAT_NETLINK_MESSAGES
  24. bool
  25. help
  26. This option can be selected by other options that need compat
  27. netlink messages.
  28. config COMPAT_NETLINK_MESSAGES
  29. def_bool y
  30. depends on COMPAT
  31. depends on WEXT_CORE || WANT_COMPAT_NETLINK_MESSAGES
  32. help
  33. This option makes it possible to send different netlink messages
  34. to tasks depending on whether the task is a compat task or not. To
  35. achieve this, you need to set skb_shinfo(skb)->frag_list to the
  36. compat skb before sending the skb, the netlink code will sort out
  37. which message to actually pass to the task.
  38. Newly written code should NEVER need this option but do
  39. compat-independent messages instead!
  40. config NET_INGRESS
  41. bool
  42. config NET_EGRESS
  43. bool
  44. menu "Networking options"
  45. source "net/packet/Kconfig"
  46. source "net/unix/Kconfig"
  47. source "net/tls/Kconfig"
  48. source "net/xfrm/Kconfig"
  49. source "net/iucv/Kconfig"
  50. source "net/smc/Kconfig"
  51. config INET
  52. bool "TCP/IP networking"
  53. select CRYPTO
  54. select CRYPTO_AES
  55. ---help---
  56. These are the protocols used on the Internet and on most local
  57. Ethernets. It is highly recommended to say Y here (this will enlarge
  58. your kernel by about 400 KB), since some programs (e.g. the X window
  59. system) use TCP/IP even if your machine is not connected to any
  60. other computer. You will get the so-called loopback device which
  61. allows you to ping yourself (great fun, that!).
  62. For an excellent introduction to Linux networking, please read the
  63. Linux Networking HOWTO, available from
  64. <http://www.tldp.org/docs.html#howto>.
  65. If you say Y here and also to "/proc file system support" and
  66. "Sysctl support" below, you can change various aspects of the
  67. behavior of the TCP/IP code by writing to the (virtual) files in
  68. /proc/sys/net/ipv4/*; the options are explained in the file
  69. <file:Documentation/networking/ip-sysctl.txt>.
  70. Short answer: say Y.
  71. if INET
  72. source "net/wireguard/Kconfig"
  73. source "net/ipv4/Kconfig"
  74. source "net/ipv6/Kconfig"
  75. source "net/netlabel/Kconfig"
  76. endif # if INET
  77. config NETWORK_SECMARK
  78. bool "Security Marking"
  79. help
  80. This enables security marking of network packets, similar
  81. to nfmark, but designated for security purposes.
  82. If you are unsure how to answer this question, answer N.
  83. config NET_PTP_CLASSIFY
  84. def_bool n
  85. config NETWORK_PHY_TIMESTAMPING
  86. bool "Timestamping in PHY devices"
  87. select NET_PTP_CLASSIFY
  88. help
  89. This allows timestamping of network packets by PHYs with
  90. hardware timestamping capabilities. This option adds some
  91. overhead in the transmit and receive paths.
  92. If you are unsure how to answer this question, answer N.
  93. menuconfig NETFILTER
  94. bool "Network packet filtering framework (Netfilter)"
  95. ---help---
  96. Netfilter is a framework for filtering and mangling network packets
  97. that pass through your Linux box.
  98. The most common use of packet filtering is to run your Linux box as
  99. a firewall protecting a local network from the Internet. The type of
  100. firewall provided by this kernel support is called a "packet
  101. filter", which means that it can reject individual network packets
  102. based on type, source, destination etc. The other kind of firewall,
  103. a "proxy-based" one, is more secure but more intrusive and more
  104. bothersome to set up; it inspects the network traffic much more
  105. closely, modifies it and has knowledge about the higher level
  106. protocols, which a packet filter lacks. Moreover, proxy-based
  107. firewalls often require changes to the programs running on the local
  108. clients. Proxy-based firewalls don't need support by the kernel, but
  109. they are often combined with a packet filter, which only works if
  110. you say Y here.
  111. You should also say Y here if you intend to use your Linux box as
  112. the gateway to the Internet for a local network of machines without
  113. globally valid IP addresses. This is called "masquerading": if one
  114. of the computers on your local network wants to send something to
  115. the outside, your box can "masquerade" as that computer, i.e. it
  116. forwards the traffic to the intended outside destination, but
  117. modifies the packets to make it look like they came from the
  118. firewall box itself. It works both ways: if the outside host
  119. replies, the Linux box will silently forward the traffic to the
  120. correct local computer. This way, the computers on your local net
  121. are completely invisible to the outside world, even though they can
  122. reach the outside and can receive replies. It is even possible to
  123. run globally visible servers from within a masqueraded local network
  124. using a mechanism called portforwarding. Masquerading is also often
  125. called NAT (Network Address Translation).
  126. Another use of Netfilter is in transparent proxying: if a machine on
  127. the local network tries to connect to an outside host, your Linux
  128. box can transparently forward the traffic to a local server,
  129. typically a caching proxy server.
  130. Yet another use of Netfilter is building a bridging firewall. Using
  131. a bridge with Network packet filtering enabled makes iptables "see"
  132. the bridged traffic. For filtering on the lower network and Ethernet
  133. protocols over the bridge, use ebtables (under bridge netfilter
  134. configuration).
  135. Various modules exist for netfilter which replace the previous
  136. masquerading (ipmasqadm), packet filtering (ipchains), transparent
  137. proxying, and portforwarding mechanisms. Please see
  138. <file:Documentation/Changes> under "iptables" for the location of
  139. these packages.
  140. if NETFILTER
  141. config NETFILTER_ADVANCED
  142. bool "Advanced netfilter configuration"
  143. depends on NETFILTER
  144. default y
  145. help
  146. If you say Y here you can select between all the netfilter modules.
  147. If you say N the more unusual ones will not be shown and the
  148. basic ones needed by most people will default to 'M'.
  149. If unsure, say Y.
  150. config BRIDGE_NETFILTER
  151. tristate "Bridged IP/ARP packets filtering"
  152. depends on BRIDGE
  153. depends on NETFILTER && INET
  154. depends on NETFILTER_ADVANCED
  155. default m
  156. ---help---
  157. Enabling this option will let arptables resp. iptables see bridged
  158. ARP resp. IP traffic. If you want a bridging firewall, you probably
  159. want this option enabled.
  160. Enabling or disabling this option doesn't enable or disable
  161. ebtables.
  162. If unsure, say N.
  163. source "net/netfilter/Kconfig"
  164. source "net/ipv4/netfilter/Kconfig"
  165. source "net/ipv6/netfilter/Kconfig"
  166. source "net/decnet/netfilter/Kconfig"
  167. source "net/bridge/netfilter/Kconfig"
  168. endif
  169. source "net/dccp/Kconfig"
  170. source "net/sctp/Kconfig"
  171. source "net/rds/Kconfig"
  172. source "net/tipc/Kconfig"
  173. source "net/atm/Kconfig"
  174. source "net/l2tp/Kconfig"
  175. source "net/802/Kconfig"
  176. source "net/bridge/Kconfig"
  177. source "net/dsa/Kconfig"
  178. source "net/8021q/Kconfig"
  179. source "net/decnet/Kconfig"
  180. source "net/llc/Kconfig"
  181. source "net/ipx/Kconfig"
  182. source "drivers/net/appletalk/Kconfig"
  183. source "net/x25/Kconfig"
  184. source "net/lapb/Kconfig"
  185. source "net/phonet/Kconfig"
  186. source "net/6lowpan/Kconfig"
  187. source "net/ieee802154/Kconfig"
  188. source "net/mac802154/Kconfig"
  189. source "net/sched/Kconfig"
  190. source "net/dcb/Kconfig"
  191. source "net/dns_resolver/Kconfig"
  192. source "net/batman-adv/Kconfig"
  193. source "net/openvswitch/Kconfig"
  194. source "net/vmw_vsock/Kconfig"
  195. source "net/netlink/Kconfig"
  196. source "net/mpls/Kconfig"
  197. source "net/nsh/Kconfig"
  198. source "net/hsr/Kconfig"
  199. source "net/switchdev/Kconfig"
  200. source "net/l3mdev/Kconfig"
  201. source "net/qrtr/Kconfig"
  202. source "net/ncsi/Kconfig"
  203. config RPS
  204. bool
  205. depends on SMP && SYSFS
  206. default y
  207. config RFS_ACCEL
  208. bool
  209. depends on RPS
  210. select CPU_RMAP
  211. default y
  212. config XPS
  213. bool
  214. depends on SMP
  215. default y
  216. config HWBM
  217. bool
  218. config CGROUP_NET_PRIO
  219. bool "Network priority cgroup"
  220. depends on CGROUPS
  221. select SOCK_CGROUP_DATA
  222. ---help---
  223. Cgroup subsystem for use in assigning processes to network priorities on
  224. a per-interface basis.
  225. config CGROUP_NET_CLASSID
  226. bool "Network classid cgroup"
  227. depends on CGROUPS
  228. select SOCK_CGROUP_DATA
  229. ---help---
  230. Cgroup subsystem for use as general purpose socket classid marker that is
  231. being used in cls_cgroup and for netfilter matching.
  232. config NET_RX_BUSY_POLL
  233. bool
  234. default y
  235. config BQL
  236. bool
  237. depends on SYSFS
  238. select DQL
  239. default y
  240. config BPF_JIT
  241. bool "enable BPF Just In Time compiler"
  242. depends on HAVE_CBPF_JIT || HAVE_EBPF_JIT
  243. depends on MODULES
  244. ---help---
  245. Berkeley Packet Filter filtering capabilities are normally handled
  246. by an interpreter. This option allows kernel to generate a native
  247. code when filter is loaded in memory. This should speedup
  248. packet sniffing (libpcap/tcpdump).
  249. Note, admin should enable this feature changing:
  250. /proc/sys/net/core/bpf_jit_enable
  251. /proc/sys/net/core/bpf_jit_harden (optional)
  252. /proc/sys/net/core/bpf_jit_kallsyms (optional)
  253. config BPF_STREAM_PARSER
  254. bool "enable BPF STREAM_PARSER"
  255. depends on BPF_SYSCALL
  256. select STREAM_PARSER
  257. ---help---
  258. Enabling this allows a stream parser to be used with
  259. BPF_MAP_TYPE_SOCKMAP.
  260. BPF_MAP_TYPE_SOCKMAP provides a map type to use with network sockets.
  261. It can be used to enforce socket policy, implement socket redirects,
  262. etc.
  263. config NET_FLOW_LIMIT
  264. bool
  265. depends on RPS
  266. default y
  267. ---help---
  268. The network stack has to drop packets when a receive processing CPU's
  269. backlog reaches netdev_max_backlog. If a few out of many active flows
  270. generate the vast majority of load, drop their traffic earlier to
  271. maintain capacity for the other flows. This feature provides servers
  272. with many clients some protection against DoS by a single (spoofed)
  273. flow that greatly exceeds average workload.
  274. menu "Network testing"
  275. config NET_PKTGEN
  276. tristate "Packet Generator (USE WITH CAUTION)"
  277. depends on INET && PROC_FS
  278. ---help---
  279. This module will inject preconfigured packets, at a configurable
  280. rate, out of a given interface. It is used for network interface
  281. stress testing and performance analysis. If you don't understand
  282. what was just said, you don't need it: say N.
  283. Documentation on how to use the packet generator can be found
  284. at <file:Documentation/networking/pktgen.txt>.
  285. To compile this code as a module, choose M here: the
  286. module will be called pktgen.
  287. config NET_TCPPROBE
  288. tristate "TCP connection probing"
  289. depends on INET && PROC_FS && KPROBES
  290. ---help---
  291. This module allows for capturing the changes to TCP connection
  292. state in response to incoming packets. It is used for debugging
  293. TCP congestion avoidance modules. If you don't understand
  294. what was just said, you don't need it: say N.
  295. Documentation on how to use TCP connection probing can be found
  296. at:
  297. http://www.linuxfoundation.org/collaborate/workgroups/networking/tcpprobe
  298. To compile this code as a module, choose M here: the
  299. module will be called tcp_probe.
  300. config NET_DROP_MONITOR
  301. tristate "Network packet drop alerting service"
  302. depends on INET && TRACEPOINTS
  303. ---help---
  304. This feature provides an alerting service to userspace in the
  305. event that packets are discarded in the network stack. Alerts
  306. are broadcast via netlink socket to any listening user space
  307. process. If you don't need network drop alerts, or if you are ok
  308. just checking the various proc files and other utilities for
  309. drop statistics, say N here.
  310. endmenu
  311. endmenu
  312. source "net/ax25/Kconfig"
  313. source "net/can/Kconfig"
  314. source "net/bluetooth/Kconfig"
  315. source "net/rxrpc/Kconfig"
  316. source "net/kcm/Kconfig"
  317. source "net/strparser/Kconfig"
  318. config FIB_RULES
  319. bool
  320. menuconfig WIRELESS
  321. bool "Wireless"
  322. depends on !S390
  323. default y
  324. if WIRELESS
  325. source "net/wireless/Kconfig"
  326. source "net/mac80211/Kconfig"
  327. endif # WIRELESS
  328. source "net/wimax/Kconfig"
  329. source "net/rfkill/Kconfig"
  330. source "net/9p/Kconfig"
  331. source "net/caif/Kconfig"
  332. source "net/ceph/Kconfig"
  333. source "net/nfc/Kconfig"
  334. source "net/psample/Kconfig"
  335. source "net/ife/Kconfig"
  336. config LWTUNNEL
  337. bool "Network light weight tunnels"
  338. ---help---
  339. This feature provides an infrastructure to support light weight
  340. tunnels like mpls. There is no netdevice associated with a light
  341. weight tunnel endpoint. Tunnel encapsulation parameters are stored
  342. with light weight tunnel state associated with fib routes.
  343. config LWTUNNEL_BPF
  344. bool "Execute BPF program as route nexthop action"
  345. depends on LWTUNNEL
  346. default y if LWTUNNEL=y
  347. ---help---
  348. Allows to run BPF programs as a nexthop action following a route
  349. lookup for incoming and outgoing packets.
  350. config DST_CACHE
  351. bool
  352. default n
  353. config GRO_CELLS
  354. bool
  355. default n
  356. config NET_DEVLINK
  357. tristate "Network physical/parent device Netlink interface"
  358. help
  359. Network physical/parent device Netlink interface provides
  360. infrastructure to support access to physical chip-wide config and
  361. monitoring.
  362. config MAY_USE_DEVLINK
  363. tristate
  364. default m if NET_DEVLINK=m
  365. default y if NET_DEVLINK=y || NET_DEVLINK=n
  366. help
  367. Drivers using the devlink infrastructure should have a dependency
  368. on MAY_USE_DEVLINK to ensure they do not cause link errors when
  369. devlink is a loadable module and the driver using it is built-in.
  370. endif # if NET
  371. # Used by archs to tell that they support BPF JIT compiler plus which flavour.
  372. # Only one of the two can be selected for a specific arch since eBPF JIT supersedes
  373. # the cBPF JIT.
  374. # Classic BPF JIT (cBPF)
  375. config HAVE_CBPF_JIT
  376. bool
  377. # Extended BPF JIT (eBPF)
  378. config HAVE_EBPF_JIT
  379. bool
  380. config MTK_NET_LOGGING
  381. bool "Enable MTK Network debug log"
  382. ---help---
  383. This config helps to enable/disable Network debug log