1 # SPDX-License-Identifier: GPL-2.0-only << 2 # 1 # 3 # IPv6 configuration 2 # IPv6 configuration 4 # !! 3 # 5 !! 4 config IPV6_PRIVACY 6 # IPv6 as module will cause a CRASH if you t !! 5 bool "IPv6: Privacy Extensions (RFC 3041) support" 7 menuconfig IPV6 !! 6 depends on IPV6 8 tristate "The IPv6 protocol" !! 7 select CRYPTO 9 default y !! 8 select CRYPTO_MD5 10 select CRYPTO_LIB_SHA1 !! 9 ---help--- 11 help !! 10 Privacy Extensions for Stateless Address Autoconfiguration in IPv6 12 Support for IP version 6 (IPv6). !! 11 support. With this option, additional periodically-alter 13 !! 12 pseudo-random global-scope unicast address(es) will assigned to 14 For general information about IPv6, !! 13 your interface(s). 15 <https://en.wikipedia.org/wiki/IPv6> !! 14 16 For specific information about IPv6 !! 15 By default, kernel do not generate temporary addresses. 17 Documentation/networking/ipv6.rst an !! 16 To use temporary addresses, do 18 <https://www.tldp.org/HOWTO/Linux+IP !! 17 19 !! 18 echo 2 >/proc/sys/net/ipv6/conf/all/use_tempaddr 20 To compile this protocol support as << 21 module will be called ipv6. << 22 << 23 if IPV6 << 24 << 25 config IPV6_ROUTER_PREF << 26 bool "IPv6: Router Preference (RFC 419 << 27 help << 28 Router Preference is an optional ext << 29 Advertisement message which improves << 30 to pick an appropriate router, espec << 31 are placed in a multi-homed network. << 32 << 33 If unsure, say N. << 34 << 35 config IPV6_ROUTE_INFO << 36 bool "IPv6: Route Information (RFC 419 << 37 depends on IPV6_ROUTER_PREF << 38 help << 39 Support of Route Information. << 40 << 41 If unsure, say N. << 42 << 43 config IPV6_OPTIMISTIC_DAD << 44 bool "IPv6: Enable RFC 4429 Optimistic << 45 help << 46 Support for optimistic Duplicate Add << 47 autoconfigured addresses to be used << 48 19 49 If unsure, say N. !! 20 See <file:Documentation/networking/ip-sysctl.txt> for details. 50 21 51 config INET6_AH 22 config INET6_AH 52 tristate "IPv6: AH transformation" 23 tristate "IPv6: AH transformation" 53 select XFRM_AH !! 24 depends on IPV6 54 help !! 25 select XFRM 55 Support for IPsec AH (Authentication !! 26 select CRYPTO 56 !! 27 select CRYPTO_HMAC 57 AH can be used with various authenti !! 28 select CRYPTO_MD5 58 enabling AH support itself, this opt !! 29 select CRYPTO_SHA1 59 implementations of the algorithms th !! 30 ---help--- 60 implemented. If you need any other !! 31 Support for IPsec AH. 61 them in the crypto API. You should << 62 implementations of any needed algori << 63 32 64 If unsure, say Y. 33 If unsure, say Y. 65 34 66 config INET6_ESP 35 config INET6_ESP 67 tristate "IPv6: ESP transformation" 36 tristate "IPv6: ESP transformation" 68 select XFRM_ESP << 69 help << 70 Support for IPsec ESP (Encapsulating << 71 << 72 ESP can be used with various encrypt << 73 Besides enabling ESP support itself, << 74 implementations of the algorithms th << 75 implemented. If you need any other << 76 them in the crypto API. You should << 77 implementations of any needed algori << 78 << 79 If unsure, say Y. << 80 << 81 config INET6_ESP_OFFLOAD << 82 tristate "IPv6: ESP transformation off << 83 depends on INET6_ESP << 84 select XFRM_OFFLOAD << 85 default n << 86 help << 87 Support for ESP transformation offlo << 88 only if this system really does IPse << 89 with high throughput. A typical desk << 90 need it, even if it does IPsec. << 91 << 92 If unsure, say N. << 93 << 94 config INET6_ESPINTCP << 95 bool "IPv6: ESP in TCP encapsulation ( << 96 depends on XFRM && INET6_ESP << 97 select STREAM_PARSER << 98 select NET_SOCK_MSG << 99 select XFRM_ESPINTCP << 100 help << 101 Support for RFC 8229 encapsulation o << 102 TCP/IPv6 sockets. << 103 << 104 If unsure, say N. << 105 << 106 config INET6_IPCOMP << 107 tristate "IPv6: IPComp transformation" << 108 select INET6_XFRM_TUNNEL << 109 select XFRM_IPCOMP << 110 help << 111 Support for IP Payload Compression P << 112 typically needed for IPsec. << 113 << 114 If unsure, say Y. << 115 << 116 config IPV6_MIP6 << 117 tristate "IPv6: Mobility" << 118 select XFRM << 119 help << 120 Support for IPv6 Mobility described << 121 << 122 If unsure, say N. << 123 << 124 config IPV6_ILA << 125 tristate "IPv6: Identifier Locator Add << 126 depends on NETFILTER << 127 select DST_CACHE << 128 select LWTUNNEL << 129 help << 130 Support for IPv6 Identifier Locator << 131 << 132 ILA is a mechanism to do network vir << 133 encapsulation. The basic concept of << 134 IPv6 address into a 64 bit locator a << 135 identifier is the identity of an ent << 136 ("who") and the locator expresses th << 137 entity ("where"). << 138 << 139 ILA can be configured using the "enc << 140 "ip -6 route" command. ILA is descri << 141 https://tools.ietf.org/html/draft-he << 142 << 143 If unsure, say N. << 144 << 145 config INET6_XFRM_TUNNEL << 146 tristate << 147 select INET6_TUNNEL << 148 default n << 149 << 150 config INET6_TUNNEL << 151 tristate << 152 default n << 153 << 154 config IPV6_VTI << 155 tristate "Virtual (secure) IPv6: tunne << 156 select IPV6_TUNNEL << 157 select NET_IP_TUNNEL << 158 select XFRM << 159 help << 160 Tunneling means encapsulating data of << 161 another protocol and sending it over a << 162 encapsulating protocol. This can be us << 163 the notion of a secure tunnel for IPSE << 164 on top. << 165 << 166 config IPV6_SIT << 167 tristate "IPv6: IPv6-in-IPv4 tunnel (S << 168 select INET_TUNNEL << 169 select NET_IP_TUNNEL << 170 select IPV6_NDISC_NODETYPE << 171 default y << 172 help << 173 Tunneling means encapsulating data o << 174 another protocol and sending it over << 175 encapsulating protocol. This driver << 176 into IPv4 packets. This is useful if << 177 networks over an IPv4-only path. << 178 << 179 Saying M here will produce a module << 180 << 181 config IPV6_SIT_6RD << 182 bool "IPv6: IPv6 Rapid Deployment (6RD << 183 depends on IPV6_SIT << 184 default n << 185 help << 186 IPv6 Rapid Deployment (6rd; draft-ie << 187 mechanisms of 6to4 (RFC3056) to enab << 188 deploy IPv6 unicast service to IPv4 << 189 customer premise equipment. Like 6t << 190 IPv4 encapsulation in order to trans << 191 infrastructure. Unlike 6to4, a 6rd << 192 prefix of its own in place of the fi << 193 << 194 With this option enabled, the SIT dr << 195 providing additional ioctl API to co << 196 stead of static 2002::/16 for 6to4. << 197 << 198 If unsure, say N. << 199 << 200 config IPV6_NDISC_NODETYPE << 201 bool << 202 << 203 config IPV6_TUNNEL << 204 tristate "IPv6: IP-in-IPv6 tunnel (RFC << 205 select INET6_TUNNEL << 206 select DST_CACHE << 207 select GRO_CELLS << 208 help << 209 Support for IPv6-in-IPv6 and IPv4-in << 210 RFC 2473. << 211 << 212 If unsure, say N. << 213 << 214 config IPV6_GRE << 215 tristate "IPv6: GRE tunnel" << 216 select IPV6_TUNNEL << 217 select NET_IP_TUNNEL << 218 depends on NET_IPGRE_DEMUX << 219 help << 220 Tunneling means encapsulating data o << 221 another protocol and sending it over << 222 encapsulating protocol. This particu << 223 GRE (Generic Routing Encapsulation) << 224 encapsulating of IPv4 or IPv6 over e << 225 This driver is useful if the other e << 226 likes GRE much better than the other << 227 tunneling" above). In addition, GRE << 228 through the tunnel. << 229 << 230 Saying M here will produce a module << 231 << 232 config IPV6_FOU << 233 tristate << 234 default NET_FOU && IPV6 << 235 << 236 config IPV6_FOU_TUNNEL << 237 tristate << 238 default NET_FOU_IP_TUNNELS && IPV6_FOU << 239 select IPV6_TUNNEL << 240 << 241 config IPV6_MULTIPLE_TABLES << 242 bool "IPv6: Multiple Routing Tables" << 243 select FIB_RULES << 244 help << 245 Support multiple routing tables. << 246 << 247 config IPV6_SUBTREES << 248 bool "IPv6: source address based routi << 249 depends on IPV6_MULTIPLE_TABLES << 250 help << 251 Enable routing by source address or << 252 << 253 The destination address is still the << 254 normal and source prefix specific ro << 255 may sometimes lead to unintended rou << 256 avoided by defining different routin << 257 source prefix specific routes. << 258 << 259 If unsure, say N. << 260 << 261 config IPV6_MROUTE << 262 bool "IPv6: multicast routing" << 263 depends on IPV6 << 264 select IP_MROUTE_COMMON << 265 help << 266 Support for IPv6 multicast forwardin << 267 If unsure, say N. << 268 << 269 config IPV6_MROUTE_MULTIPLE_TABLES << 270 bool "IPv6: multicast policy routing" << 271 depends on IPV6_MROUTE << 272 select FIB_RULES << 273 help << 274 Normally, a multicast router runs a << 275 what to do with a multicast packet b << 276 destination addresses. If you say Y << 277 will also be able to take interfaces << 278 account and run multiple instances o << 279 simultaneously, each one handling a << 280 << 281 If unsure, say N. << 282 << 283 config IPV6_PIMSM_V2 << 284 bool "IPv6: PIM-SM version 2 support" << 285 depends on IPV6_MROUTE << 286 help << 287 Support for IPv6 PIM multicast routi << 288 If unsure, say N. << 289 << 290 config IPV6_SEG6_LWTUNNEL << 291 bool "IPv6: Segment Routing Header enc << 292 depends on IPV6 << 293 select LWTUNNEL << 294 select DST_CACHE << 295 select IPV6_MULTIPLE_TABLES << 296 help << 297 Support for encapsulation of packets << 298 header and a Segment Routing Header << 299 tunnels mechanism. Also enable suppo << 300 processing of SRv6 packets based on << 301 << 302 If unsure, say N. << 303 << 304 config IPV6_SEG6_HMAC << 305 bool "IPv6: Segment Routing HMAC suppo << 306 depends on IPV6 37 depends on IPV6 >> 38 select XFRM 307 select CRYPTO 39 select CRYPTO 308 select CRYPTO_HMAC 40 select CRYPTO_HMAC >> 41 select CRYPTO_MD5 309 select CRYPTO_SHA1 42 select CRYPTO_SHA1 310 select CRYPTO_SHA256 !! 43 select CRYPTO_DES 311 help !! 44 ---help--- 312 Support for HMAC signature generatio !! 45 Support for IPsec ESP. 313 of SR-enabled packets. << 314 << 315 If unsure, say N. << 316 46 317 config IPV6_SEG6_BPF !! 47 If unsure, say Y. 318 def_bool y << 319 depends on IPV6_SEG6_LWTUNNEL << 320 depends on IPV6 = y << 321 48 322 config IPV6_RPL_LWTUNNEL !! 49 config INET6_IPCOMP 323 bool "IPv6: RPL Source Routing Header !! 50 tristate "IPv6: IPComp transformation" 324 depends on IPV6 51 depends on IPV6 325 select LWTUNNEL !! 52 select XFRM 326 select DST_CACHE !! 53 select CRYPTO 327 help !! 54 select CRYPTO_DEFLATE 328 Support for RFC6554 RPL Source Routi !! 55 ---help--- 329 tunnels mechanism. !! 56 Support for IP Paylod Compression (RFC3173), typically needed >> 57 for IPsec. 330 58 331 If unsure, say N. !! 59 If unsure, say Y. 332 60 333 config IPV6_IOAM6_LWTUNNEL !! 61 config IPV6_TUNNEL 334 bool "IPv6: IOAM Pre-allocated Trace i !! 62 tristate "IPv6: IPv6-in-IPv6 tunnel" 335 depends on IPV6 63 depends on IPV6 336 select LWTUNNEL !! 64 ---help--- 337 select DST_CACHE !! 65 Support for IPv6-in-IPv6 tunnels described in RFC 2473. 338 help << 339 Support for the insertion of IOAM Pr << 340 Header using the lightweight tunnels << 341 66 342 If unsure, say N. 67 If unsure, say N. 343 68 344 endif # IPV6 <<
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.