2005-04-16 16:20:36 -06:00
|
|
|
#
|
|
|
|
# Network configuration
|
|
|
|
#
|
|
|
|
|
2008-07-30 04:14:01 -06:00
|
|
|
menuconfig NET
|
2005-04-16 16:20:36 -06:00
|
|
|
bool "Networking support"
|
2009-03-03 23:53:30 -07:00
|
|
|
select NLATTR
|
2005-04-16 16:20:36 -06:00
|
|
|
---help---
|
|
|
|
Unless you really know what you are doing, you should say Y here.
|
|
|
|
The reason is that some programs need kernel networking support even
|
|
|
|
when running on a stand-alone machine that isn't connected to any
|
2005-07-11 22:03:49 -06:00
|
|
|
other computer.
|
|
|
|
|
|
|
|
If you are upgrading from an older kernel, you
|
2005-04-16 16:20:36 -06:00
|
|
|
should consider updating your networking tools too because changes
|
|
|
|
in the kernel and the tools often go hand in hand. The tools are
|
|
|
|
contained in the package net-tools, the location and version number
|
|
|
|
of which are given in <file:Documentation/Changes>.
|
|
|
|
|
|
|
|
For a general introduction to Linux networking, it is highly
|
|
|
|
recommended to read the NET-HOWTO, available from
|
|
|
|
<http://www.tldp.org/docs.html#howto>.
|
|
|
|
|
2005-07-11 22:13:56 -06:00
|
|
|
if NET
|
2005-04-16 16:20:36 -06:00
|
|
|
|
net/compat/wext: send different messages to compat tasks
Wireless extensions have the unfortunate problem that events
are multicast netlink messages, and are not independent of
pointer size. Thus, currently 32-bit tasks on 64-bit platforms
cannot properly receive events and fail with all kinds of
strange problems, for instance wpa_supplicant never notices
disassociations, due to the way the 64-bit event looks (to a
32-bit process), the fact that the address is all zeroes is
lost, it thinks instead it is 00:00:00:00:01:00.
The same problem existed with the ioctls, until David Miller
fixed those some time ago in an heroic effort.
A different problem caused by this is that we cannot send the
ASSOCREQIE/ASSOCRESPIE events because sending them causes a
32-bit wpa_supplicant on a 64-bit system to overwrite its
internal information, which is worse than it not getting the
information at all -- so we currently resort to sending a
custom string event that it then parses. This, however, has a
severe size limitation we are frequently hitting with modern
access points; this limitation would can be lifted after this
patch by sending the correct binary, not custom, event.
A similar problem apparently happens for some other netlink
users on x86_64 with 32-bit tasks due to the alignment for
64-bit quantities.
In order to fix these problems, I have implemented a way to
send compat messages to tasks. When sending an event, we send
the non-compat event data together with a compat event data in
skb_shinfo(main_skb)->frag_list. Then, when the event is read
from the socket, the netlink code makes sure to pass out only
the skb that is compatible with the task. This approach was
suggested by David Miller, my original approach required
always sending two skbs but that had various small problems.
To determine whether compat is needed or not, I have used the
MSG_CMSG_COMPAT flag, and adjusted the call path for recv and
recvfrom to include it, even if those calls do not have a cmsg
parameter.
I have not solved one small part of the problem, and I don't
think it is necessary to: if a 32-bit application uses read()
rather than any form of recvmsg() it will still get the wrong
(64-bit) event. However, neither do applications actually do
this, nor would it be a regression.
Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2009-07-01 05:26:02 -06:00
|
|
|
config WANT_COMPAT_NETLINK_MESSAGES
|
|
|
|
bool
|
|
|
|
help
|
|
|
|
This option can be selected by other options that need compat
|
|
|
|
netlink messages.
|
|
|
|
|
|
|
|
config COMPAT_NETLINK_MESSAGES
|
|
|
|
def_bool y
|
|
|
|
depends on COMPAT
|
|
|
|
depends on WIRELESS_EXT || WANT_COMPAT_NETLINK_MESSAGES
|
|
|
|
help
|
|
|
|
This option makes it possible to send different netlink messages
|
|
|
|
to tasks depending on whether the task is a compat task or not. To
|
|
|
|
achieve this, you need to set skb_shinfo(skb)->frag_list to the
|
|
|
|
compat skb before sending the skb, the netlink code will sort out
|
|
|
|
which message to actually pass to the task.
|
|
|
|
|
|
|
|
Newly written code should NEVER need this option but do
|
|
|
|
compat-independent messages instead!
|
|
|
|
|
2005-07-11 22:13:56 -06:00
|
|
|
menu "Networking options"
|
2005-04-16 16:20:36 -06:00
|
|
|
|
2005-07-11 22:13:56 -06:00
|
|
|
source "net/packet/Kconfig"
|
|
|
|
source "net/unix/Kconfig"
|
|
|
|
source "net/xfrm/Kconfig"
|
2007-02-08 14:37:42 -07:00
|
|
|
source "net/iucv/Kconfig"
|
2005-04-16 16:20:36 -06:00
|
|
|
|
|
|
|
config INET
|
|
|
|
bool "TCP/IP networking"
|
|
|
|
---help---
|
|
|
|
These are the protocols used on the Internet and on most local
|
|
|
|
Ethernets. It is highly recommended to say Y here (this will enlarge
|
2008-02-12 01:35:16 -07:00
|
|
|
your kernel by about 400 KB), since some programs (e.g. the X window
|
2005-04-16 16:20:36 -06:00
|
|
|
system) use TCP/IP even if your machine is not connected to any
|
|
|
|
other computer. You will get the so-called loopback device which
|
|
|
|
allows you to ping yourself (great fun, that!).
|
|
|
|
|
|
|
|
For an excellent introduction to Linux networking, please read the
|
|
|
|
Linux Networking HOWTO, available from
|
|
|
|
<http://www.tldp.org/docs.html#howto>.
|
|
|
|
|
|
|
|
If you say Y here and also to "/proc file system support" and
|
|
|
|
"Sysctl support" below, you can change various aspects of the
|
|
|
|
behavior of the TCP/IP code by writing to the (virtual) files in
|
|
|
|
/proc/sys/net/ipv4/*; the options are explained in the file
|
|
|
|
<file:Documentation/networking/ip-sysctl.txt>.
|
|
|
|
|
|
|
|
Short answer: say Y.
|
|
|
|
|
2005-07-11 22:13:56 -06:00
|
|
|
if INET
|
2005-04-16 16:20:36 -06:00
|
|
|
source "net/ipv4/Kconfig"
|
|
|
|
source "net/ipv6/Kconfig"
|
2006-11-05 17:44:06 -07:00
|
|
|
source "net/netlabel/Kconfig"
|
2005-04-16 16:20:36 -06:00
|
|
|
|
2005-07-11 22:13:56 -06:00
|
|
|
endif # if INET
|
|
|
|
|
2006-06-09 01:29:17 -06:00
|
|
|
config NETWORK_SECMARK
|
|
|
|
bool "Security Marking"
|
|
|
|
help
|
|
|
|
This enables security marking of network packets, similar
|
|
|
|
to nfmark, but designated for security purposes.
|
|
|
|
If you are unsure how to answer this question, answer N.
|
|
|
|
|
2005-04-16 16:20:36 -06:00
|
|
|
menuconfig NETFILTER
|
2006-11-28 18:35:43 -07:00
|
|
|
bool "Network packet filtering framework (Netfilter)"
|
2005-04-16 16:20:36 -06:00
|
|
|
---help---
|
|
|
|
Netfilter is a framework for filtering and mangling network packets
|
|
|
|
that pass through your Linux box.
|
|
|
|
|
|
|
|
The most common use of packet filtering is to run your Linux box as
|
|
|
|
a firewall protecting a local network from the Internet. The type of
|
|
|
|
firewall provided by this kernel support is called a "packet
|
|
|
|
filter", which means that it can reject individual network packets
|
|
|
|
based on type, source, destination etc. The other kind of firewall,
|
|
|
|
a "proxy-based" one, is more secure but more intrusive and more
|
|
|
|
bothersome to set up; it inspects the network traffic much more
|
|
|
|
closely, modifies it and has knowledge about the higher level
|
|
|
|
protocols, which a packet filter lacks. Moreover, proxy-based
|
|
|
|
firewalls often require changes to the programs running on the local
|
|
|
|
clients. Proxy-based firewalls don't need support by the kernel, but
|
|
|
|
they are often combined with a packet filter, which only works if
|
|
|
|
you say Y here.
|
|
|
|
|
|
|
|
You should also say Y here if you intend to use your Linux box as
|
|
|
|
the gateway to the Internet for a local network of machines without
|
|
|
|
globally valid IP addresses. This is called "masquerading": if one
|
|
|
|
of the computers on your local network wants to send something to
|
|
|
|
the outside, your box can "masquerade" as that computer, i.e. it
|
|
|
|
forwards the traffic to the intended outside destination, but
|
|
|
|
modifies the packets to make it look like they came from the
|
|
|
|
firewall box itself. It works both ways: if the outside host
|
|
|
|
replies, the Linux box will silently forward the traffic to the
|
|
|
|
correct local computer. This way, the computers on your local net
|
|
|
|
are completely invisible to the outside world, even though they can
|
|
|
|
reach the outside and can receive replies. It is even possible to
|
|
|
|
run globally visible servers from within a masqueraded local network
|
|
|
|
using a mechanism called portforwarding. Masquerading is also often
|
|
|
|
called NAT (Network Address Translation).
|
|
|
|
|
|
|
|
Another use of Netfilter is in transparent proxying: if a machine on
|
|
|
|
the local network tries to connect to an outside host, your Linux
|
|
|
|
box can transparently forward the traffic to a local server,
|
|
|
|
typically a caching proxy server.
|
|
|
|
|
|
|
|
Yet another use of Netfilter is building a bridging firewall. Using
|
|
|
|
a bridge with Network packet filtering enabled makes iptables "see"
|
|
|
|
the bridged traffic. For filtering on the lower network and Ethernet
|
|
|
|
protocols over the bridge, use ebtables (under bridge netfilter
|
|
|
|
configuration).
|
|
|
|
|
|
|
|
Various modules exist for netfilter which replace the previous
|
|
|
|
masquerading (ipmasqadm), packet filtering (ipchains), transparent
|
|
|
|
proxying, and portforwarding mechanisms. Please see
|
|
|
|
<file:Documentation/Changes> under "iptables" for the location of
|
|
|
|
these packages.
|
|
|
|
|
|
|
|
if NETFILTER
|
|
|
|
|
|
|
|
config NETFILTER_DEBUG
|
|
|
|
bool "Network packet filtering debugging"
|
|
|
|
depends on NETFILTER
|
|
|
|
help
|
|
|
|
You can say Y here if you want to get additional messages useful in
|
|
|
|
debugging the netfilter code.
|
|
|
|
|
2007-12-17 23:47:05 -07:00
|
|
|
config NETFILTER_ADVANCED
|
|
|
|
bool "Advanced netfilter configuration"
|
|
|
|
depends on NETFILTER
|
|
|
|
default y
|
|
|
|
help
|
|
|
|
If you say Y here you can select between all the netfilter modules.
|
2009-01-26 03:12:25 -07:00
|
|
|
If you say N the more unusual ones will not be shown and the
|
2007-12-17 23:47:05 -07:00
|
|
|
basic ones needed by most people will default to 'M'.
|
|
|
|
|
|
|
|
If unsure, say Y.
|
|
|
|
|
2005-04-16 16:20:36 -06:00
|
|
|
config BRIDGE_NETFILTER
|
|
|
|
bool "Bridged IP/ARP packets filtering"
|
|
|
|
depends on BRIDGE && NETFILTER && INET
|
2007-12-17 23:47:05 -07:00
|
|
|
depends on NETFILTER_ADVANCED
|
2005-04-16 16:20:36 -06:00
|
|
|
default y
|
|
|
|
---help---
|
|
|
|
Enabling this option will let arptables resp. iptables see bridged
|
|
|
|
ARP resp. IP traffic. If you want a bridging firewall, you probably
|
|
|
|
want this option enabled.
|
|
|
|
Enabling or disabling this option doesn't enable or disable
|
|
|
|
ebtables.
|
|
|
|
|
|
|
|
If unsure, say N.
|
|
|
|
|
2005-09-17 01:41:21 -06:00
|
|
|
source "net/netfilter/Kconfig"
|
2005-04-16 16:20:36 -06:00
|
|
|
source "net/ipv4/netfilter/Kconfig"
|
|
|
|
source "net/ipv6/netfilter/Kconfig"
|
|
|
|
source "net/decnet/netfilter/Kconfig"
|
|
|
|
source "net/bridge/netfilter/Kconfig"
|
|
|
|
|
|
|
|
endif
|
|
|
|
|
2005-08-09 21:14:34 -06:00
|
|
|
source "net/dccp/Kconfig"
|
2005-04-16 16:20:36 -06:00
|
|
|
source "net/sctp/Kconfig"
|
2009-02-24 08:30:39 -07:00
|
|
|
source "net/rds/Kconfig"
|
2006-01-16 08:39:13 -07:00
|
|
|
source "net/tipc/Kconfig"
|
2005-07-11 22:13:56 -06:00
|
|
|
source "net/atm/Kconfig"
|
2008-07-05 22:25:39 -06:00
|
|
|
source "net/802/Kconfig"
|
2005-07-11 22:13:56 -06:00
|
|
|
source "net/bridge/Kconfig"
|
net: Distributed Switch Architecture protocol support
Distributed Switch Architecture is a protocol for managing hardware
switch chips. It consists of a set of MII management registers and
commands to configure the switch, and an ethernet header format to
signal which of the ports of the switch a packet was received from
or is intended to be sent to.
The switches that this driver supports are typically embedded in
access points and routers, and a typical setup with a DSA switch
looks something like this:
+-----------+ +-----------+
| | RGMII | |
| +-------+ +------ 1000baseT MDI ("WAN")
| | | 6-port +------ 1000baseT MDI ("LAN1")
| CPU | | ethernet +------ 1000baseT MDI ("LAN2")
| |MIImgmt| switch +------ 1000baseT MDI ("LAN3")
| +-------+ w/5 PHYs +------ 1000baseT MDI ("LAN4")
| | | |
+-----------+ +-----------+
The switch driver presents each port on the switch as a separate
network interface to Linux, polls the switch to maintain software
link state of those ports, forwards MII management interface
accesses to those network interfaces (e.g. as done by ethtool) to
the switch, and exposes the switch's hardware statistics counters
via the appropriate Linux kernel interfaces.
This initial patch supports the MII management interface register
layout of the Marvell 88E6123, 88E6161 and 88E6165 switch chips, and
supports the "Ethertype DSA" packet tagging format.
(There is no officially registered ethertype for the Ethertype DSA
packet format, so we just grab a random one. The ethertype to use
is programmed into the switch, and the switch driver uses the value
of ETH_P_EDSA for this, so this define can be changed at any time in
the future if the one we chose is allocated to another protocol or
if Ethertype DSA gets its own officially registered ethertype, and
everything will continue to work.)
Signed-off-by: Lennert Buytenhek <buytenh@marvell.com>
Tested-by: Nicolas Pitre <nico@marvell.com>
Tested-by: Byron Bradley <byron.bbradley@gmail.com>
Tested-by: Tim Ellis <tim.ellis@mac.com>
Tested-by: Peter van Valderen <linux@ddcrew.com>
Tested-by: Dirk Teurlings <dirk@upexia.nl>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-10-07 07:44:02 -06:00
|
|
|
source "net/dsa/Kconfig"
|
2005-07-11 22:13:56 -06:00
|
|
|
source "net/8021q/Kconfig"
|
2005-04-16 16:20:36 -06:00
|
|
|
source "net/decnet/Kconfig"
|
|
|
|
source "net/llc/Kconfig"
|
|
|
|
source "net/ipx/Kconfig"
|
|
|
|
source "drivers/net/appletalk/Kconfig"
|
2005-07-11 22:13:56 -06:00
|
|
|
source "net/x25/Kconfig"
|
|
|
|
source "net/lapb/Kconfig"
|
|
|
|
source "net/econet/Kconfig"
|
|
|
|
source "net/wanrouter/Kconfig"
|
2009-01-22 20:00:25 -07:00
|
|
|
source "net/phonet/Kconfig"
|
2009-06-08 06:18:48 -06:00
|
|
|
source "net/ieee802154/Kconfig"
|
2005-04-16 16:20:36 -06:00
|
|
|
source "net/sched/Kconfig"
|
2008-11-20 21:52:10 -07:00
|
|
|
source "net/dcb/Kconfig"
|
2005-04-16 16:20:36 -06:00
|
|
|
|
|
|
|
menu "Network testing"
|
|
|
|
|
|
|
|
config NET_PKTGEN
|
|
|
|
tristate "Packet Generator (USE WITH CAUTION)"
|
|
|
|
depends on PROC_FS
|
|
|
|
---help---
|
|
|
|
This module will inject preconfigured packets, at a configurable
|
|
|
|
rate, out of a given interface. It is used for network interface
|
|
|
|
stress testing and performance analysis. If you don't understand
|
|
|
|
what was just said, you don't need it: say N.
|
|
|
|
|
|
|
|
Documentation on how to use the packet generator can be found
|
|
|
|
at <file:Documentation/networking/pktgen.txt>.
|
|
|
|
|
|
|
|
To compile this code as a module, choose M here: the
|
|
|
|
module will be called pktgen.
|
|
|
|
|
2006-06-05 18:30:32 -06:00
|
|
|
config NET_TCPPROBE
|
|
|
|
tristate "TCP connection probing"
|
|
|
|
depends on INET && EXPERIMENTAL && PROC_FS && KPROBES
|
|
|
|
---help---
|
|
|
|
This module allows for capturing the changes to TCP connection
|
2006-06-09 00:42:09 -06:00
|
|
|
state in response to incoming packets. It is used for debugging
|
2006-06-05 18:30:32 -06:00
|
|
|
TCP congestion avoidance modules. If you don't understand
|
|
|
|
what was just said, you don't need it: say N.
|
|
|
|
|
2006-09-26 00:47:14 -06:00
|
|
|
Documentation on how to use TCP connection probing can be found
|
2006-06-05 18:30:32 -06:00
|
|
|
at http://linux-net.osdl.org/index.php/TcpProbe
|
|
|
|
|
|
|
|
To compile this code as a module, choose M here: the
|
|
|
|
module will be called tcp_probe.
|
|
|
|
|
2009-03-11 03:53:16 -06:00
|
|
|
config NET_DROP_MONITOR
|
|
|
|
boolean "Network packet drop alerting service"
|
|
|
|
depends on INET && EXPERIMENTAL && TRACEPOINTS
|
|
|
|
---help---
|
|
|
|
This feature provides an alerting service to userspace in the
|
|
|
|
event that packets are discarded in the network stack. Alerts
|
|
|
|
are broadcast via netlink socket to any listening user space
|
|
|
|
process. If you don't need network drop alerts, or if you are ok
|
|
|
|
just checking the various proc files and other utilities for
|
|
|
|
drop statistics, say N here.
|
|
|
|
|
2005-04-16 16:20:36 -06:00
|
|
|
endmenu
|
|
|
|
|
|
|
|
endmenu
|
|
|
|
|
|
|
|
source "net/ax25/Kconfig"
|
2007-11-16 16:52:17 -07:00
|
|
|
source "net/can/Kconfig"
|
2005-04-16 16:20:36 -06:00
|
|
|
source "net/irda/Kconfig"
|
|
|
|
source "net/bluetooth/Kconfig"
|
2007-04-26 16:48:28 -06:00
|
|
|
source "net/rxrpc/Kconfig"
|
2006-01-20 16:46:55 -07:00
|
|
|
|
2006-08-04 04:38:38 -06:00
|
|
|
config FIB_RULES
|
|
|
|
bool
|
|
|
|
|
2008-07-24 10:20:09 -06:00
|
|
|
menuconfig WIRELESS
|
|
|
|
bool "Wireless"
|
2007-05-10 07:46:01 -06:00
|
|
|
depends on !S390
|
2008-07-24 10:20:09 -06:00
|
|
|
default y
|
|
|
|
|
|
|
|
if WIRELESS
|
2007-04-23 13:19:12 -06:00
|
|
|
|
|
|
|
source "net/wireless/Kconfig"
|
2007-05-05 12:45:53 -06:00
|
|
|
source "net/mac80211/Kconfig"
|
2007-04-23 13:19:12 -06:00
|
|
|
|
2008-07-24 10:20:09 -06:00
|
|
|
endif # WIRELESS
|
2007-04-23 13:19:12 -06:00
|
|
|
|
2008-12-23 17:18:24 -07:00
|
|
|
source "net/wimax/Kconfig"
|
|
|
|
|
2007-05-07 01:34:20 -06:00
|
|
|
source "net/rfkill/Kconfig"
|
2007-07-10 16:57:28 -06:00
|
|
|
source "net/9p/Kconfig"
|
2007-05-07 01:34:20 -06:00
|
|
|
|
2005-07-11 22:13:56 -06:00
|
|
|
endif # if NET
|