Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | # |
| 2 | # Network configuration |
| 3 | # |
| 4 | |
Robert P. J. Day | 031cf19 | 2008-07-30 03:14:01 -0700 | [diff] [blame] | 5 | menuconfig NET |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 6 | bool "Networking support" |
Geert Uytterhoeven | e9cc8bd | 2009-03-04 14:53:30 +0800 | [diff] [blame] | 7 | select NLATTR |
Andy Shevchenko | 4cd5773 | 2013-06-04 19:46:26 +0300 | [diff] [blame] | 8 | select GENERIC_NET_UTILS |
Alexei Starovoitov | f89b775 | 2014-10-23 18:41:08 -0700 | [diff] [blame] | 9 | select BPF |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 10 | ---help--- |
| 11 | Unless you really know what you are doing, you should say Y here. |
| 12 | The reason is that some programs need kernel networking support even |
| 13 | when running on a stand-alone machine that isn't connected to any |
Sam Ravnborg | d5950b4 | 2005-07-11 21:03:49 -0700 | [diff] [blame] | 14 | other computer. |
| 15 | |
| 16 | If you are upgrading from an older kernel, you |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 17 | should consider updating your networking tools too because changes |
| 18 | in the kernel and the tools often go hand in hand. The tools are |
| 19 | contained in the package net-tools, the location and version number |
| 20 | of which are given in <file:Documentation/Changes>. |
| 21 | |
| 22 | For a general introduction to Linux networking, it is highly |
| 23 | recommended to read the NET-HOWTO, available from |
| 24 | <http://www.tldp.org/docs.html#howto>. |
| 25 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 26 | if NET |
| 27 | |
Johannes Berg | 1dacc76 | 2009-07-01 11:26:02 +0000 | [diff] [blame] | 28 | config WANT_COMPAT_NETLINK_MESSAGES |
| 29 | bool |
| 30 | help |
| 31 | This option can be selected by other options that need compat |
| 32 | netlink messages. |
| 33 | |
| 34 | config COMPAT_NETLINK_MESSAGES |
| 35 | def_bool y |
| 36 | depends on COMPAT |
David S. Miller | 40b53d8 | 2010-07-26 13:13:49 -0700 | [diff] [blame] | 37 | depends on WEXT_CORE || WANT_COMPAT_NETLINK_MESSAGES |
Johannes Berg | 1dacc76 | 2009-07-01 11:26:02 +0000 | [diff] [blame] | 38 | help |
| 39 | This option makes it possible to send different netlink messages |
| 40 | to tasks depending on whether the task is a compat task or not. To |
| 41 | achieve this, you need to set skb_shinfo(skb)->frag_list to the |
| 42 | compat skb before sending the skb, the netlink code will sort out |
| 43 | which message to actually pass to the task. |
| 44 | |
| 45 | Newly written code should NEVER need this option but do |
| 46 | compat-independent messages instead! |
| 47 | |
Pablo Neira | 1cf51900 | 2015-05-13 18:19:37 +0200 | [diff] [blame] | 48 | config NET_INGRESS |
| 49 | bool |
| 50 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 51 | menu "Networking options" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 52 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 53 | source "net/packet/Kconfig" |
| 54 | source "net/unix/Kconfig" |
| 55 | source "net/xfrm/Kconfig" |
Martin Schwidefsky | 2356f4c | 2007-02-08 13:37:42 -0800 | [diff] [blame] | 56 | source "net/iucv/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 57 | |
| 58 | config INET |
| 59 | bool "TCP/IP networking" |
David S. Miller | 798b2cb | 2012-09-04 14:20:14 -0400 | [diff] [blame] | 60 | select CRYPTO |
| 61 | select CRYPTO_AES |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 62 | ---help--- |
| 63 | These are the protocols used on the Internet and on most local |
| 64 | Ethernets. It is highly recommended to say Y here (this will enlarge |
YOSHIFUJI Hideaki | cf80efc | 2008-02-12 17:35:16 +0900 | [diff] [blame] | 65 | your kernel by about 400 KB), since some programs (e.g. the X window |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 66 | system) use TCP/IP even if your machine is not connected to any |
| 67 | other computer. You will get the so-called loopback device which |
| 68 | allows you to ping yourself (great fun, that!). |
| 69 | |
| 70 | For an excellent introduction to Linux networking, please read the |
| 71 | Linux Networking HOWTO, available from |
| 72 | <http://www.tldp.org/docs.html#howto>. |
| 73 | |
| 74 | If you say Y here and also to "/proc file system support" and |
| 75 | "Sysctl support" below, you can change various aspects of the |
| 76 | behavior of the TCP/IP code by writing to the (virtual) files in |
| 77 | /proc/sys/net/ipv4/*; the options are explained in the file |
| 78 | <file:Documentation/networking/ip-sysctl.txt>. |
| 79 | |
| 80 | Short answer: say Y. |
| 81 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 82 | if INET |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 83 | source "net/ipv4/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 84 | source "net/ipv6/Kconfig" |
Paul Moore | 38c9437 | 2006-11-05 16:44:06 -0800 | [diff] [blame] | 85 | source "net/netlabel/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 86 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 87 | endif # if INET |
| 88 | |
James Morris | 984bc16 | 2006-06-09 00:29:17 -0700 | [diff] [blame] | 89 | config NETWORK_SECMARK |
| 90 | bool "Security Marking" |
| 91 | help |
| 92 | This enables security marking of network packets, similar |
| 93 | to nfmark, but designated for security purposes. |
| 94 | If you are unsure how to answer this question, answer N. |
| 95 | |
Daniel Borkmann | 408eccc | 2014-04-01 16:20:23 +0200 | [diff] [blame] | 96 | config NET_PTP_CLASSIFY |
| 97 | def_bool n |
| 98 | |
Richard Cochran | c1f19b5 | 2010-07-17 08:49:36 +0000 | [diff] [blame] | 99 | config NETWORK_PHY_TIMESTAMPING |
| 100 | bool "Timestamping in PHY devices" |
Daniel Borkmann | 408eccc | 2014-04-01 16:20:23 +0200 | [diff] [blame] | 101 | select NET_PTP_CLASSIFY |
Richard Cochran | c1f19b5 | 2010-07-17 08:49:36 +0000 | [diff] [blame] | 102 | help |
| 103 | This allows timestamping of network packets by PHYs with |
| 104 | hardware timestamping capabilities. This option adds some |
| 105 | overhead in the transmit and receive paths. |
| 106 | |
| 107 | If you are unsure how to answer this question, answer N. |
| 108 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 109 | menuconfig NETFILTER |
Pablo Neira Ayuso | ef91fd5 | 2006-11-29 02:35:43 +0100 | [diff] [blame] | 110 | bool "Network packet filtering framework (Netfilter)" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 111 | ---help--- |
| 112 | Netfilter is a framework for filtering and mangling network packets |
| 113 | that pass through your Linux box. |
| 114 | |
| 115 | The most common use of packet filtering is to run your Linux box as |
| 116 | a firewall protecting a local network from the Internet. The type of |
| 117 | firewall provided by this kernel support is called a "packet |
| 118 | filter", which means that it can reject individual network packets |
| 119 | based on type, source, destination etc. The other kind of firewall, |
| 120 | a "proxy-based" one, is more secure but more intrusive and more |
| 121 | bothersome to set up; it inspects the network traffic much more |
| 122 | closely, modifies it and has knowledge about the higher level |
| 123 | protocols, which a packet filter lacks. Moreover, proxy-based |
| 124 | firewalls often require changes to the programs running on the local |
| 125 | clients. Proxy-based firewalls don't need support by the kernel, but |
| 126 | they are often combined with a packet filter, which only works if |
| 127 | you say Y here. |
| 128 | |
| 129 | You should also say Y here if you intend to use your Linux box as |
| 130 | the gateway to the Internet for a local network of machines without |
| 131 | globally valid IP addresses. This is called "masquerading": if one |
| 132 | of the computers on your local network wants to send something to |
| 133 | the outside, your box can "masquerade" as that computer, i.e. it |
| 134 | forwards the traffic to the intended outside destination, but |
| 135 | modifies the packets to make it look like they came from the |
| 136 | firewall box itself. It works both ways: if the outside host |
| 137 | replies, the Linux box will silently forward the traffic to the |
| 138 | correct local computer. This way, the computers on your local net |
| 139 | are completely invisible to the outside world, even though they can |
| 140 | reach the outside and can receive replies. It is even possible to |
| 141 | run globally visible servers from within a masqueraded local network |
| 142 | using a mechanism called portforwarding. Masquerading is also often |
| 143 | called NAT (Network Address Translation). |
| 144 | |
| 145 | Another use of Netfilter is in transparent proxying: if a machine on |
| 146 | the local network tries to connect to an outside host, your Linux |
| 147 | box can transparently forward the traffic to a local server, |
| 148 | typically a caching proxy server. |
| 149 | |
| 150 | Yet another use of Netfilter is building a bridging firewall. Using |
| 151 | a bridge with Network packet filtering enabled makes iptables "see" |
| 152 | the bridged traffic. For filtering on the lower network and Ethernet |
| 153 | protocols over the bridge, use ebtables (under bridge netfilter |
| 154 | configuration). |
| 155 | |
| 156 | Various modules exist for netfilter which replace the previous |
| 157 | masquerading (ipmasqadm), packet filtering (ipchains), transparent |
| 158 | proxying, and portforwarding mechanisms. Please see |
| 159 | <file:Documentation/Changes> under "iptables" for the location of |
| 160 | these packages. |
| 161 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 162 | if NETFILTER |
| 163 | |
| 164 | config NETFILTER_DEBUG |
| 165 | bool "Network packet filtering debugging" |
| 166 | depends on NETFILTER |
| 167 | help |
| 168 | You can say Y here if you want to get additional messages useful in |
| 169 | debugging the netfilter code. |
| 170 | |
Patrick McHardy | 33b8e77 | 2007-12-17 22:47:05 -0800 | [diff] [blame] | 171 | config NETFILTER_ADVANCED |
| 172 | bool "Advanced netfilter configuration" |
| 173 | depends on NETFILTER |
| 174 | default y |
| 175 | help |
| 176 | If you say Y here you can select between all the netfilter modules. |
Matt LaPlante | 692105b | 2009-01-26 11:12:25 +0100 | [diff] [blame] | 177 | If you say N the more unusual ones will not be shown and the |
Patrick McHardy | 33b8e77 | 2007-12-17 22:47:05 -0800 | [diff] [blame] | 178 | basic ones needed by most people will default to 'M'. |
| 179 | |
| 180 | If unsure, say Y. |
| 181 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 182 | config BRIDGE_NETFILTER |
Pablo Neira Ayuso | 34666d4 | 2014-09-18 11:29:03 +0200 | [diff] [blame] | 183 | tristate "Bridged IP/ARP packets filtering" |
Florian Westphal | 57f5877 | 2014-09-30 10:59:18 +0200 | [diff] [blame] | 184 | depends on BRIDGE |
Pablo Neira Ayuso | 34666d4 | 2014-09-18 11:29:03 +0200 | [diff] [blame] | 185 | depends on NETFILTER && INET |
Patrick McHardy | 33b8e77 | 2007-12-17 22:47:05 -0800 | [diff] [blame] | 186 | depends on NETFILTER_ADVANCED |
Pablo Neira Ayuso | 34666d4 | 2014-09-18 11:29:03 +0200 | [diff] [blame] | 187 | default m |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 188 | ---help--- |
| 189 | Enabling this option will let arptables resp. iptables see bridged |
| 190 | ARP resp. IP traffic. If you want a bridging firewall, you probably |
| 191 | want this option enabled. |
| 192 | Enabling or disabling this option doesn't enable or disable |
| 193 | ebtables. |
| 194 | |
| 195 | If unsure, say N. |
| 196 | |
Harald Welte | 9eb0eec | 2005-09-17 00:41:21 -0700 | [diff] [blame] | 197 | source "net/netfilter/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 198 | source "net/ipv4/netfilter/Kconfig" |
| 199 | source "net/ipv6/netfilter/Kconfig" |
| 200 | source "net/decnet/netfilter/Kconfig" |
| 201 | source "net/bridge/netfilter/Kconfig" |
| 202 | |
| 203 | endif |
| 204 | |
Arnaldo Carvalho de Melo | 7c65787 | 2005-08-09 20:14:34 -0700 | [diff] [blame] | 205 | source "net/dccp/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 206 | source "net/sctp/Kconfig" |
Andy Grover | fe17f84 | 2009-02-24 15:30:39 +0000 | [diff] [blame] | 207 | source "net/rds/Kconfig" |
Per Liden | 1e63e68 | 2006-01-16 16:39:13 +0100 | [diff] [blame] | 208 | source "net/tipc/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 209 | source "net/atm/Kconfig" |
James Chapman | fd558d1 | 2010-04-02 06:18:33 +0000 | [diff] [blame] | 210 | source "net/l2tp/Kconfig" |
Patrick McHardy | a19800d | 2008-07-05 21:25:39 -0700 | [diff] [blame] | 211 | source "net/802/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 212 | source "net/bridge/Kconfig" |
Lennert Buytenhek | 91da11f | 2008-10-07 13:44:02 +0000 | [diff] [blame] | 213 | source "net/dsa/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 214 | source "net/8021q/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 215 | source "net/decnet/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 216 | source "net/llc/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 217 | source "net/ipx/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 218 | source "drivers/net/appletalk/Kconfig" |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 219 | source "net/x25/Kconfig" |
| 220 | source "net/lapb/Kconfig" |
remi.denis-courmont@nokia | 5075138 | 2009-01-23 03:00:25 +0000 | [diff] [blame] | 221 | source "net/phonet/Kconfig" |
Alexander Aring | 2c6bed7 | 2014-07-11 10:24:18 +0200 | [diff] [blame] | 222 | source "net/6lowpan/Kconfig" |
Sergey Lapin | 9ec7671 | 2009-06-08 12:18:48 +0000 | [diff] [blame] | 223 | source "net/ieee802154/Kconfig" |
alex.bluesman.smirnov@gmail.com | 1010f54 | 2012-05-15 20:50:20 +0000 | [diff] [blame] | 224 | source "net/mac802154/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 225 | source "net/sched/Kconfig" |
Alexander Duyck | 2f90b86 | 2008-11-20 20:52:10 -0800 | [diff] [blame] | 226 | source "net/dcb/Kconfig" |
Wang Lei | 1a4240f | 2010-08-04 15:16:33 +0100 | [diff] [blame] | 227 | source "net/dns_resolver/Kconfig" |
Sven Eckelmann | c6c8fea | 2010-12-13 11:19:28 +0000 | [diff] [blame] | 228 | source "net/batman-adv/Kconfig" |
Jesse Gross | ccb1352 | 2011-10-25 19:26:31 -0700 | [diff] [blame] | 229 | source "net/openvswitch/Kconfig" |
Andy King | d021c34 | 2013-02-06 14:23:56 +0000 | [diff] [blame] | 230 | source "net/vmw_vsock/Kconfig" |
Andrey Vagin | eaaa313 | 2013-03-21 20:33:48 +0400 | [diff] [blame] | 231 | source "net/netlink/Kconfig" |
Simon Horman | 0d89d20 | 2013-05-23 21:02:52 +0000 | [diff] [blame] | 232 | source "net/mpls/Kconfig" |
Arvid Brodin | f421436 | 2013-10-30 21:10:47 +0100 | [diff] [blame] | 233 | source "net/hsr/Kconfig" |
Jiri Pirko | 007f790 | 2014-11-28 14:34:17 +0100 | [diff] [blame] | 234 | source "net/switchdev/Kconfig" |
David Ahern | 1b69c6d | 2015-09-29 20:07:11 -0700 | [diff] [blame] | 235 | source "net/l3mdev/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 236 | |
Eric Dumazet | df33454 | 2010-03-24 19:13:54 +0000 | [diff] [blame] | 237 | config RPS |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 238 | bool |
Yuanhan Liu | 044c8d4 | 2013-11-21 14:32:01 -0800 | [diff] [blame] | 239 | depends on SMP && SYSFS |
Eric Dumazet | df33454 | 2010-03-24 19:13:54 +0000 | [diff] [blame] | 240 | default y |
| 241 | |
Ben Hutchings | c445477 | 2011-01-19 11:03:53 +0000 | [diff] [blame] | 242 | config RFS_ACCEL |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 243 | bool |
Martin Schwidefsky | 0244ad0 | 2013-08-30 09:39:53 +0200 | [diff] [blame] | 244 | depends on RPS |
Ben Hutchings | c445477 | 2011-01-19 11:03:53 +0000 | [diff] [blame] | 245 | select CPU_RMAP |
| 246 | default y |
| 247 | |
Tom Herbert | bf26414 | 2010-11-26 08:36:09 +0000 | [diff] [blame] | 248 | config XPS |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 249 | bool |
Yuanhan Liu | 044c8d4 | 2013-11-21 14:32:01 -0800 | [diff] [blame] | 250 | depends on SMP |
Tom Herbert | bf26414 | 2010-11-26 08:36:09 +0000 | [diff] [blame] | 251 | default y |
| 252 | |
Daniel Borkmann | 86f8515 | 2013-12-29 17:27:11 +0100 | [diff] [blame] | 253 | config CGROUP_NET_PRIO |
Tejun Heo | af636337 | 2014-02-08 10:36:58 -0500 | [diff] [blame] | 254 | bool "Network priority cgroup" |
Neil Horman | 5bc1421 | 2011-11-22 05:10:51 +0000 | [diff] [blame] | 255 | depends on CGROUPS |
| 256 | ---help--- |
| 257 | Cgroup subsystem for use in assigning processes to network priorities on |
Daniel Borkmann | 86f8515 | 2013-12-29 17:27:11 +0100 | [diff] [blame] | 258 | a per-interface basis. |
Neil Horman | 5bc1421 | 2011-11-22 05:10:51 +0000 | [diff] [blame] | 259 | |
Daniel Borkmann | fe1217c | 2013-12-29 18:27:10 +0100 | [diff] [blame] | 260 | config CGROUP_NET_CLASSID |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 261 | bool "Network classid cgroup" |
Daniel Borkmann | fe1217c | 2013-12-29 18:27:10 +0100 | [diff] [blame] | 262 | depends on CGROUPS |
| 263 | ---help--- |
| 264 | Cgroup subsystem for use as general purpose socket classid marker that is |
| 265 | being used in cls_cgroup and for netfilter matching. |
| 266 | |
Cong Wang | e0d1095 | 2013-08-01 11:10:25 +0800 | [diff] [blame] | 267 | config NET_RX_BUSY_POLL |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 268 | bool |
Eliezer Tamir | 89bf1b5 | 2013-06-14 16:33:46 +0300 | [diff] [blame] | 269 | default y |
Eliezer Tamir | 0602129 | 2013-06-10 11:39:50 +0300 | [diff] [blame] | 270 | |
Tom Herbert | 114cf58 | 2011-11-28 16:33:09 +0000 | [diff] [blame] | 271 | config BQL |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 272 | bool |
Tom Herbert | 114cf58 | 2011-11-28 16:33:09 +0000 | [diff] [blame] | 273 | depends on SYSFS |
| 274 | select DQL |
| 275 | default y |
| 276 | |
Eric Dumazet | 0a14842 | 2011-04-20 09:27:32 +0000 | [diff] [blame] | 277 | config BPF_JIT |
| 278 | bool "enable BPF Just In Time compiler" |
| 279 | depends on HAVE_BPF_JIT |
Eric Dumazet | b6202f9 | 2011-04-29 10:20:53 -0700 | [diff] [blame] | 280 | depends on MODULES |
Eric Dumazet | 0a14842 | 2011-04-20 09:27:32 +0000 | [diff] [blame] | 281 | ---help--- |
| 282 | Berkeley Packet Filter filtering capabilities are normally handled |
| 283 | by an interpreter. This option allows kernel to generate a native |
| 284 | code when filter is loaded in memory. This should speedup |
| 285 | packet sniffing (libpcap/tcpdump). Note : Admin should enable |
| 286 | this feature changing /proc/sys/net/core/bpf_jit_enable |
| 287 | |
Willem de Bruijn | 99bbc70 | 2013-05-20 04:02:32 +0000 | [diff] [blame] | 288 | config NET_FLOW_LIMIT |
Christoph Jaeger | 6341e62 | 2014-12-20 15:41:11 -0500 | [diff] [blame] | 289 | bool |
Willem de Bruijn | 99bbc70 | 2013-05-20 04:02:32 +0000 | [diff] [blame] | 290 | depends on RPS |
| 291 | default y |
| 292 | ---help--- |
| 293 | The network stack has to drop packets when a receive processing CPU's |
| 294 | backlog reaches netdev_max_backlog. If a few out of many active flows |
| 295 | generate the vast majority of load, drop their traffic earlier to |
| 296 | maintain capacity for the other flows. This feature provides servers |
| 297 | with many clients some protection against DoS by a single (spoofed) |
| 298 | flow that greatly exceeds average workload. |
| 299 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 300 | menu "Network testing" |
| 301 | |
| 302 | config NET_PKTGEN |
| 303 | tristate "Packet Generator (USE WITH CAUTION)" |
Thomas Graf | ffd756b | 2013-07-29 13:44:15 +0200 | [diff] [blame] | 304 | depends on INET && PROC_FS |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 305 | ---help--- |
| 306 | This module will inject preconfigured packets, at a configurable |
| 307 | rate, out of a given interface. It is used for network interface |
| 308 | stress testing and performance analysis. If you don't understand |
| 309 | what was just said, you don't need it: say N. |
| 310 | |
| 311 | Documentation on how to use the packet generator can be found |
| 312 | at <file:Documentation/networking/pktgen.txt>. |
| 313 | |
| 314 | To compile this code as a module, choose M here: the |
| 315 | module will be called pktgen. |
| 316 | |
Stephen Hemminger | a42e9d6 | 2006-06-05 17:30:32 -0700 | [diff] [blame] | 317 | config NET_TCPPROBE |
| 318 | tristate "TCP connection probing" |
Kees Cook | 911f863 | 2012-10-02 11:19:40 -0700 | [diff] [blame] | 319 | depends on INET && PROC_FS && KPROBES |
Stephen Hemminger | a42e9d6 | 2006-06-05 17:30:32 -0700 | [diff] [blame] | 320 | ---help--- |
| 321 | This module allows for capturing the changes to TCP connection |
Dave Jones | 9dadaa19 | 2006-06-08 23:42:09 -0700 | [diff] [blame] | 322 | state in response to incoming packets. It is used for debugging |
Stephen Hemminger | a42e9d6 | 2006-06-05 17:30:32 -0700 | [diff] [blame] | 323 | TCP congestion avoidance modules. If you don't understand |
| 324 | what was just said, you don't need it: say N. |
| 325 | |
Grant Grundler | 82fe7c9 | 2006-09-25 23:47:14 -0700 | [diff] [blame] | 326 | Documentation on how to use TCP connection probing can be found |
Michael Witten | c996d8b | 2010-11-15 19:55:34 +0000 | [diff] [blame] | 327 | at: |
| 328 | |
| 329 | http://www.linuxfoundation.org/collaborate/workgroups/networking/tcpprobe |
Stephen Hemminger | a42e9d6 | 2006-06-05 17:30:32 -0700 | [diff] [blame] | 330 | |
| 331 | To compile this code as a module, choose M here: the |
| 332 | module will be called tcp_probe. |
| 333 | |
Neil Horman | 273ae44 | 2009-03-11 09:53:16 +0000 | [diff] [blame] | 334 | config NET_DROP_MONITOR |
Neil Horman | cad456d | 2012-05-17 10:04:00 +0000 | [diff] [blame] | 335 | tristate "Network packet drop alerting service" |
Kees Cook | 911f863 | 2012-10-02 11:19:40 -0700 | [diff] [blame] | 336 | depends on INET && TRACEPOINTS |
Neil Horman | 273ae44 | 2009-03-11 09:53:16 +0000 | [diff] [blame] | 337 | ---help--- |
| 338 | This feature provides an alerting service to userspace in the |
| 339 | event that packets are discarded in the network stack. Alerts |
| 340 | are broadcast via netlink socket to any listening user space |
| 341 | process. If you don't need network drop alerts, or if you are ok |
| 342 | just checking the various proc files and other utilities for |
| 343 | drop statistics, say N here. |
| 344 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 345 | endmenu |
| 346 | |
| 347 | endmenu |
| 348 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 349 | source "net/ax25/Kconfig" |
Oliver Hartkopp | 0d66548 | 2007-11-16 15:52:17 -0800 | [diff] [blame] | 350 | source "net/can/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 351 | source "net/irda/Kconfig" |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 352 | source "net/bluetooth/Kconfig" |
David Howells | 17926a7 | 2007-04-26 15:48:28 -0700 | [diff] [blame] | 353 | source "net/rxrpc/Kconfig" |
Adrian Bunk | d86b5e0 | 2006-01-21 00:46:55 +0100 | [diff] [blame] | 354 | |
Thomas Graf | 14c0b97 | 2006-08-04 03:38:38 -0700 | [diff] [blame] | 355 | config FIB_RULES |
| 356 | bool |
| 357 | |
Robert P. J. Day | 5442060 | 2008-07-24 12:20:09 -0400 | [diff] [blame] | 358 | menuconfig WIRELESS |
| 359 | bool "Wireless" |
Martin Schwidefsky | f54bfc0 | 2007-05-10 15:46:01 +0200 | [diff] [blame] | 360 | depends on !S390 |
Robert P. J. Day | 5442060 | 2008-07-24 12:20:09 -0400 | [diff] [blame] | 361 | default y |
| 362 | |
| 363 | if WIRELESS |
Johannes Berg | 2a5e1c0 | 2007-04-23 12:19:12 -0700 | [diff] [blame] | 364 | |
| 365 | source "net/wireless/Kconfig" |
Jiri Benc | f0706e8 | 2007-05-05 11:45:53 -0700 | [diff] [blame] | 366 | source "net/mac80211/Kconfig" |
Johannes Berg | 2a5e1c0 | 2007-04-23 12:19:12 -0700 | [diff] [blame] | 367 | |
Robert P. J. Day | 5442060 | 2008-07-24 12:20:09 -0400 | [diff] [blame] | 368 | endif # WIRELESS |
Johannes Berg | 2a5e1c0 | 2007-04-23 12:19:12 -0700 | [diff] [blame] | 369 | |
Inaky Perez-Gonzalez | b0c83ae | 2008-12-23 16:18:24 -0800 | [diff] [blame] | 370 | source "net/wimax/Kconfig" |
| 371 | |
Ivo van Doorn | cf4328c | 2007-05-07 00:34:20 -0700 | [diff] [blame] | 372 | source "net/rfkill/Kconfig" |
Latchesar Ionkov | bd238fb | 2007-07-10 17:57:28 -0500 | [diff] [blame] | 373 | source "net/9p/Kconfig" |
Sjur Braendeland | 3908c69 | 2010-03-30 13:56:28 +0000 | [diff] [blame] | 374 | source "net/caif/Kconfig" |
Yehuda Sadeh | 3d14c5d | 2010-04-06 15:14:15 -0700 | [diff] [blame] | 375 | source "net/ceph/Kconfig" |
Lauro Ramos Venancio | 3e256b8 | 2011-07-01 19:31:33 -0300 | [diff] [blame] | 376 | source "net/nfc/Kconfig" |
Sjur Braendeland | 3908c69 | 2010-03-30 13:56:28 +0000 | [diff] [blame] | 377 | |
Roopa Prabhu | 499a242 | 2015-07-21 10:43:46 +0200 | [diff] [blame] | 378 | config LWTUNNEL |
| 379 | bool "Network light weight tunnels" |
| 380 | ---help--- |
| 381 | This feature provides an infrastructure to support light weight |
| 382 | tunnels like mpls. There is no netdevice associated with a light |
| 383 | weight tunnel endpoint. Tunnel encapsulation parameters are stored |
| 384 | with light weight tunnel state associated with fib routes. |
Ivo van Doorn | cf4328c | 2007-05-07 00:34:20 -0700 | [diff] [blame] | 385 | |
Sam Ravnborg | 6a2e9b7 | 2005-07-11 21:13:56 -0700 | [diff] [blame] | 386 | endif # if NET |
Sam Ravnborg | e47b65b | 2012-05-21 20:45:37 +0200 | [diff] [blame] | 387 | |
| 388 | # Used by archs to tell that they support BPF_JIT |
| 389 | config HAVE_BPF_JIT |
| 390 | bool |