1# SPDX-License-Identifier: GPL-2.0-only 2# 3# Network device configuration 4# 5 6menuconfig NETDEVICES 7 default y if UML 8 depends on NET 9 bool "Network device support" 10 help 11 You can say N here if you don't intend to connect your Linux box to 12 any other computer at all. 13 14 You'll have to say Y if your computer contains a network card that 15 you want to use under Linux. If you are going to run SLIP or PPP over 16 telephone line or null modem cable you need say Y here. Connecting 17 two machines with parallel ports using PLIP needs this, as well as 18 AX.25/KISS for sending Internet traffic over amateur radio links. 19 20 See also "The Linux Network Administrator's Guide" by Olaf Kirch and 21 Terry Dawson. Available at <http://www.tldp.org/guides.html>. 22 23 If unsure, say Y. 24 25# All the following symbols are dependent on NETDEVICES - do not repeat 26# that for each of the symbols. 27if NETDEVICES 28 29config MII 30 tristate 31 32config NET_CORE 33 default y 34 bool "Network core driver support" 35 help 36 You can say N here if you do not intend to use any of the 37 networking core drivers (i.e. VLAN, bridging, bonding, etc.) 38 39if NET_CORE 40 41config BONDING 42 tristate "Bonding driver support" 43 depends on INET 44 depends on IPV6 || IPV6=n 45 depends on TLS || TLS_DEVICE=n 46 help 47 Say 'Y' or 'M' if you wish to be able to 'bond' multiple Ethernet 48 Channels together. This is called 'Etherchannel' by Cisco, 49 'Trunking' by Sun, 802.3ad by the IEEE, and 'Bonding' in Linux. 50 51 The driver supports multiple bonding modes to allow for both high 52 performance and high availability operation. 53 54 Refer to <file:Documentation/networking/bonding.rst> for more 55 information. 56 57 To compile this driver as a module, choose M here: the module 58 will be called bonding. 59 60config DUMMY 61 tristate "Dummy net driver support" 62 help 63 This is essentially a bit-bucket device (i.e. traffic you send to 64 this device is consigned into oblivion) with a configurable IP 65 address. It is most commonly used in order to make your currently 66 inactive SLIP address seem like a real address for local programs. 67 If you use SLIP or PPP, you might want to say Y here. It won't 68 enlarge your kernel. What a deal. Read about it in the Network 69 Administrator's Guide, available from 70 <http://www.tldp.org/docs.html#guide>. 71 72 To compile this driver as a module, choose M here: the module 73 will be called dummy. 74 75config WIREGUARD 76 tristate "WireGuard secure network tunnel" 77 depends on NET && INET 78 depends on IPV6 || !IPV6 79 depends on !KMSAN # KMSAN doesn't support the crypto configs below 80 select NET_UDP_TUNNEL 81 select DST_CACHE 82 select CRYPTO 83 select CRYPTO_LIB_CURVE25519 84 select CRYPTO_LIB_CHACHA20POLY1305 85 select CRYPTO_CHACHA20_X86_64 if X86 && 64BIT 86 select CRYPTO_POLY1305_X86_64 if X86 && 64BIT 87 select CRYPTO_BLAKE2S_X86 if X86 && 64BIT 88 select CRYPTO_CURVE25519_X86 if X86 && 64BIT 89 select CRYPTO_CHACHA20_NEON if ARM || (ARM64 && KERNEL_MODE_NEON) 90 select CRYPTO_POLY1305_NEON if ARM64 && KERNEL_MODE_NEON 91 select CRYPTO_POLY1305_ARM if ARM 92 select CRYPTO_BLAKE2S_ARM if ARM 93 select CRYPTO_CURVE25519_NEON if ARM && KERNEL_MODE_NEON 94 select CRYPTO_CHACHA_MIPS if CPU_MIPS32_R2 95 select CRYPTO_POLY1305_MIPS if MIPS 96 select CRYPTO_CHACHA_S390 if S390 97 help 98 WireGuard is a secure, fast, and easy to use replacement for IPSec 99 that uses modern cryptography and clever networking tricks. It's 100 designed to be fairly general purpose and abstract enough to fit most 101 use cases, while at the same time remaining extremely simple to 102 configure. See www.wireguard.com for more info. 103 104 It's safe to say Y or M here, as the driver is very lightweight and 105 is only in use when an administrator chooses to add an interface. 106 107config WIREGUARD_DEBUG 108 bool "Debugging checks and verbose messages" 109 depends on WIREGUARD 110 help 111 This will write log messages for handshake and other events 112 that occur for a WireGuard interface. It will also perform some 113 extra validation checks and unit tests at various points. This is 114 only useful for debugging. 115 116 Say N here unless you know what you're doing. 117 118config OVPN 119 tristate "OpenVPN data channel offload" 120 depends on NET && INET 121 depends on IPV6 || !IPV6 122 select DST_CACHE 123 select NET_UDP_TUNNEL 124 help 125 This module enhances the performance of the OpenVPN userspace software 126 by offloading the data channel processing to kernelspace. 127 128config EQUALIZER 129 tristate "EQL (serial line load balancing) support" 130 help 131 If you have two serial connections to some other computer (this 132 usually requires two modems and two telephone lines) and you use 133 SLIP (the protocol for sending Internet traffic over telephone 134 lines) or PPP (a better SLIP) on them, you can make them behave like 135 one double speed connection using this driver. Naturally, this has 136 to be supported at the other end as well, either with a similar EQL 137 Linux driver or with a Livingston Portmaster 2e. 138 139 Say Y if you want this and read 140 <file:Documentation/networking/eql.rst>. You may also want to read 141 section 6.2 of the NET-3-HOWTO, available from 142 <http://www.tldp.org/docs.html#howto>. 143 144 To compile this driver as a module, choose M here: the module 145 will be called eql. If unsure, say N. 146 147config NET_FC 148 bool "Fibre Channel driver support" 149 depends on SCSI && PCI 150 help 151 Fibre Channel is a high speed serial protocol mainly used to connect 152 large storage devices to the computer; it is compatible with and 153 intended to replace SCSI. 154 155 If you intend to use Fibre Channel, you need to have a Fibre channel 156 adaptor card in your computer; say Y here and to the driver for your 157 adaptor below. You also should have said Y to "SCSI support" and 158 "SCSI generic support". 159 160config IFB 161 tristate "Intermediate Functional Block support" 162 depends on NET_ACT_MIRRED || NFT_FWD_NETDEV 163 select NET_REDIRECT 164 help 165 This is an intermediate driver that allows sharing of 166 resources. 167 To compile this driver as a module, choose M here: the module 168 will be called ifb. If you want to use more than one ifb 169 device at a time, you need to compile this driver as a module. 170 Instead of 'ifb', the devices will then be called 'ifb0', 171 'ifb1' etc. 172 Look at the iproute2 documentation directory for usage etc 173 174source "drivers/net/team/Kconfig" 175 176config MACVLAN 177 tristate "MAC-VLAN support" 178 help 179 This allows one to create virtual interfaces that map packets to 180 or from specific MAC addresses to a particular interface. 181 182 Macvlan devices can be added using the "ip" command from the 183 iproute2 package starting with the iproute2-2.6.23 release: 184 185 "ip link add link <real dev> [ address MAC ] [ NAME ] type macvlan" 186 187 To compile this driver as a module, choose M here: the module 188 will be called macvlan. 189 190config MACVTAP 191 tristate "MAC-VLAN based tap driver" 192 depends on MACVLAN 193 depends on INET 194 select TAP 195 help 196 This adds a specialized tap character device driver that is based 197 on the MAC-VLAN network interface, called macvtap. A macvtap device 198 can be added in the same way as a macvlan device, using 'type 199 macvtap', and then be accessed through the tap user space interface. 200 201 To compile this driver as a module, choose M here: the module 202 will be called macvtap. 203 204config IPVLAN_L3S 205 depends on NETFILTER 206 depends on IPVLAN 207 def_bool y 208 select NET_L3_MASTER_DEV 209 210config IPVLAN 211 tristate "IP-VLAN support" 212 depends on INET 213 depends on IPV6 || !IPV6 214 help 215 This allows one to create virtual devices off of a main interface 216 and packets will be delivered based on the dest L3 (IPv6/IPv4 addr) 217 on packets. All interfaces (including the main interface) share L2 218 making it transparent to the connected L2 switch. 219 220 Ipvlan devices can be added using the "ip" command from the 221 iproute2 package starting with the iproute2-3.19 release: 222 223 "ip link add link <main-dev> [ NAME ] type ipvlan" 224 225 To compile this driver as a module, choose M here: the module 226 will be called ipvlan. 227 228config IPVTAP 229 tristate "IP-VLAN based tap driver" 230 depends on IPVLAN 231 depends on INET 232 select TAP 233 help 234 This adds a specialized tap character device driver that is based 235 on the IP-VLAN network interface, called ipvtap. An ipvtap device 236 can be added in the same way as a ipvlan device, using 'type 237 ipvtap', and then be accessed through the tap user space interface. 238 239 To compile this driver as a module, choose M here: the module 240 will be called ipvtap. 241 242config VXLAN 243 tristate "Virtual eXtensible Local Area Network (VXLAN)" 244 depends on INET 245 select NET_UDP_TUNNEL 246 select GRO_CELLS 247 help 248 This allows one to create vxlan virtual interfaces that provide 249 Layer 2 Networks over Layer 3 Networks. VXLAN is often used 250 to tunnel virtual network infrastructure in virtualized environments. 251 For more information see: 252 http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-02 253 254 To compile this driver as a module, choose M here: the module 255 will be called vxlan. 256 257config GENEVE 258 tristate "Generic Network Virtualization Encapsulation" 259 depends on INET 260 depends on IPV6 || !IPV6 261 select NET_UDP_TUNNEL 262 select GRO_CELLS 263 help 264 This allows one to create geneve virtual interfaces that provide 265 Layer 2 Networks over Layer 3 Networks. GENEVE is often used 266 to tunnel virtual network infrastructure in virtualized environments. 267 For more information see: 268 http://tools.ietf.org/html/draft-gross-geneve-02 269 270 To compile this driver as a module, choose M here: the module 271 will be called geneve. 272 273config BAREUDP 274 tristate "Bare UDP Encapsulation" 275 depends on INET 276 depends on IPV6 || !IPV6 277 select NET_UDP_TUNNEL 278 select GRO_CELLS 279 help 280 This adds a bare UDP tunnel module for tunnelling different 281 kinds of traffic like MPLS, IP, etc. inside a UDP tunnel. 282 283 To compile this driver as a module, choose M here: the module 284 will be called bareudp. 285 286config GTP 287 tristate "GPRS Tunneling Protocol datapath (GTP-U)" 288 depends on INET 289 select NET_UDP_TUNNEL 290 help 291 This allows one to create gtp virtual interfaces that provide 292 the GPRS Tunneling Protocol datapath (GTP-U). This tunneling protocol 293 is used to prevent subscribers from accessing mobile carrier core 294 network infrastructure. This driver requires a userspace software that 295 implements the signaling protocol (GTP-C) to update its PDP context 296 base, such as OpenGGSN <http://git.osmocom.org/openggsn/). This 297 tunneling protocol is implemented according to the GSM TS 09.60 and 298 3GPP TS 29.060 standards. 299 300 To compile this drivers as a module, choose M here: the module 301 will be called gtp. 302 303config PFCP 304 tristate "Packet Forwarding Control Protocol (PFCP)" 305 depends on INET 306 select NET_UDP_TUNNEL 307 help 308 This allows one to create PFCP virtual interfaces that allows to 309 set up software and hardware offload of PFCP packets. 310 Note that this module does not support PFCP protocol in the kernel space. 311 There is no support for parsing any PFCP messages. 312 313 To compile this drivers as a module, choose M here: the module 314 will be called pfcp. 315 316config AMT 317 tristate "Automatic Multicast Tunneling (AMT)" 318 depends on INET && IP_MULTICAST 319 depends on IPV6 || !IPV6 320 select NET_UDP_TUNNEL 321 help 322 This allows one to create AMT(Automatic Multicast Tunneling) 323 virtual interfaces that provide multicast tunneling. 324 There are two roles, Gateway, and Relay. 325 Gateway Encapsulates IGMP/MLD traffic from listeners to the Relay. 326 Gateway Decapsulates multicast traffic from the Relay to Listeners. 327 Relay Encapsulates multicast traffic from Sources to Gateway. 328 Relay Decapsulates IGMP/MLD traffic from Gateway. 329 330 To compile this drivers as a module, choose M here: the module 331 will be called amt. 332 333config MACSEC 334 tristate "IEEE 802.1AE MAC-level encryption (MACsec)" 335 select CRYPTO 336 select CRYPTO_AES 337 select CRYPTO_GCM 338 select GRO_CELLS 339 help 340 MACsec is an encryption standard for Ethernet. 341 342config NETCONSOLE 343 tristate "Network console logging support" 344 help 345 If you want to log kernel messages over the network, enable this. 346 See <file:Documentation/networking/netconsole.rst> for details. 347 348config NETCONSOLE_DYNAMIC 349 bool "Dynamic reconfiguration of logging targets" 350 depends on NETCONSOLE && SYSFS && CONFIGFS_FS && \ 351 !(NETCONSOLE=y && CONFIGFS_FS=m) 352 help 353 This option enables the ability to dynamically reconfigure target 354 parameters (interface, IP addresses, port numbers, MAC addresses) 355 at runtime through a userspace interface exported using configfs. 356 See <file:Documentation/networking/netconsole.rst> for details. 357 358config NETCONSOLE_EXTENDED_LOG 359 bool "Set kernel extended message by default" 360 depends on NETCONSOLE 361 default n 362 help 363 Set extended log support for netconsole message. If this option is 364 set, log messages are transmitted with extended metadata header in a 365 format similar to /dev/kmsg. See 366 <file:Documentation/networking/netconsole.rst> for details. 367 368config NETCONSOLE_PREPEND_RELEASE 369 bool "Prepend kernel release version in the message by default" 370 depends on NETCONSOLE_EXTENDED_LOG 371 default n 372 help 373 Set kernel release to be prepended to each netconsole message by 374 default. If this option is set, the kernel release is prepended into 375 the first field of every netconsole message, so, the netconsole 376 server/peer can easily identify what kernel release is logging each 377 message. See <file:Documentation/networking/netconsole.rst> for 378 details. 379 380config NETPOLL 381 def_bool NETCONSOLE 382 383config NET_POLL_CONTROLLER 384 def_bool NETPOLL 385 386config NTB_NETDEV 387 tristate "Virtual Ethernet over NTB Transport" 388 depends on NTB_TRANSPORT 389 390config RIONET 391 tristate "RapidIO Ethernet over messaging driver support" 392 depends on RAPIDIO 393 394config RIONET_TX_SIZE 395 int "Number of outbound queue entries" 396 depends on RIONET 397 default "128" 398 399config RIONET_RX_SIZE 400 int "Number of inbound queue entries" 401 depends on RIONET 402 default "128" 403 404config TUN 405 tristate "Universal TUN/TAP device driver support" 406 depends on INET 407 select CRC32 408 help 409 TUN/TAP provides packet reception and transmission for user space 410 programs. It can be viewed as a simple Point-to-Point or Ethernet 411 device, which instead of receiving packets from a physical media, 412 receives them from user space program and instead of sending packets 413 via physical media writes them to the user space program. 414 415 When a program opens /dev/net/tun, driver creates and registers 416 corresponding net device tunX or tapX. After a program closed above 417 devices, driver will automatically delete tunXX or tapXX device and 418 all routes corresponding to it. 419 420 Please read <file:Documentation/networking/tuntap.rst> for more 421 information. 422 423 To compile this driver as a module, choose M here: the module 424 will be called tun. 425 426 If you don't know what to use this for, you don't need it. 427 428config TAP 429 tristate 430 help 431 This option is selected by any driver implementing tap user space 432 interface for a virtual interface to re-use core tap functionality. 433 434config TUN_VNET_CROSS_LE 435 bool "Support for cross-endian vnet headers on little-endian kernels" 436 default n 437 help 438 This option allows TUN/TAP and MACVTAP device drivers in a 439 little-endian kernel to parse vnet headers that come from a 440 big-endian legacy virtio device. 441 442 Userspace programs can control the feature using the TUNSETVNETBE 443 and TUNGETVNETBE ioctls. 444 445 Unless you have a little-endian system hosting a big-endian virtual 446 machine with a legacy virtio NIC, you should say N. 447 448config VETH 449 tristate "Virtual ethernet pair device" 450 select PAGE_POOL 451 help 452 This device is a local ethernet tunnel. Devices are created in pairs. 453 When one end receives the packet it appears on its pair and vice 454 versa. 455 456config VIRTIO_NET 457 tristate "Virtio network driver" 458 depends on VIRTIO 459 select NET_FAILOVER 460 select DIMLIB 461 help 462 This is the virtual network driver for virtio. It can be used with 463 QEMU based VMMs (like KVM or Xen). Say Y or M. 464 465config NLMON 466 tristate "Virtual netlink monitoring device" 467 help 468 This option enables a monitoring net device for netlink skbs. The 469 purpose of this is to analyze netlink messages with packet sockets. 470 Thus applications like tcpdump will be able to see local netlink 471 messages if they tap into the netlink device, record pcaps for further 472 diagnostics, etc. This is mostly intended for developers or support 473 to debug netlink issues. If unsure, say N. 474 475config NETKIT 476 bool "BPF-programmable network device" 477 depends on BPF_SYSCALL 478 help 479 The netkit device is a virtual networking device where BPF programs 480 can be attached to the device(s) transmission routine in order to 481 implement the driver's internal logic. The device can be configured 482 to operate in L3 or L2 mode. If unsure, say N. 483 484config NET_VRF 485 tristate "Virtual Routing and Forwarding (Lite)" 486 depends on IP_MULTIPLE_TABLES 487 depends on NET_L3_MASTER_DEV 488 depends on IPV6 || IPV6=n 489 depends on IPV6_MULTIPLE_TABLES || IPV6=n 490 help 491 This option enables the support for mapping interfaces into VRF's. The 492 support enables VRF devices. 493 494config VSOCKMON 495 tristate "Virtual vsock monitoring device" 496 depends on VHOST_VSOCK 497 help 498 This option enables a monitoring net device for vsock sockets. It is 499 mostly intended for developers or support to debug vsock issues. If 500 unsure, say N. 501 502config MHI_NET 503 tristate "MHI network driver" 504 depends on MHI_BUS 505 help 506 This is the network driver for MHI bus. It can be used with 507 QCOM based WWAN modems for IP or QMAP/rmnet protocol (like SDX55). 508 Say Y or M. 509 510endif # NET_CORE 511 512config SUNGEM_PHY 513 tristate 514 515source "drivers/net/arcnet/Kconfig" 516 517source "drivers/atm/Kconfig" 518 519source "drivers/net/caif/Kconfig" 520 521source "drivers/net/dsa/Kconfig" 522 523source "drivers/net/ethernet/Kconfig" 524 525source "drivers/net/fddi/Kconfig" 526 527source "drivers/net/hippi/Kconfig" 528 529source "drivers/net/ipa/Kconfig" 530 531source "drivers/net/phy/Kconfig" 532 533source "drivers/net/pse-pd/Kconfig" 534 535source "drivers/net/can/Kconfig" 536 537source "drivers/net/mctp/Kconfig" 538 539source "drivers/net/mdio/Kconfig" 540 541source "drivers/net/pcs/Kconfig" 542 543source "drivers/net/plip/Kconfig" 544 545source "drivers/net/ppp/Kconfig" 546 547source "drivers/net/slip/Kconfig" 548 549source "drivers/s390/net/Kconfig" 550 551source "drivers/net/usb/Kconfig" 552 553source "drivers/net/wireless/Kconfig" 554 555source "drivers/net/wan/Kconfig" 556 557source "drivers/net/ieee802154/Kconfig" 558 559source "drivers/net/wwan/Kconfig" 560 561config XEN_NETDEV_FRONTEND 562 tristate "Xen network device frontend driver" 563 depends on XEN 564 select XEN_XENBUS_FRONTEND 565 select PAGE_POOL 566 default y 567 help 568 This driver provides support for Xen paravirtual network 569 devices exported by a Xen network driver domain (often 570 domain 0). 571 572 The corresponding Linux backend driver is enabled by the 573 CONFIG_XEN_NETDEV_BACKEND option. 574 575 If you are compiling a kernel for use as Xen guest, you 576 should say Y here. To compile this driver as a module, chose 577 M here: the module will be called xen-netfront. 578 579config XEN_NETDEV_BACKEND 580 tristate "Xen backend network device" 581 depends on XEN_BACKEND 582 help 583 This driver allows the kernel to act as a Xen network driver 584 domain which exports paravirtual network devices to other 585 Xen domains. These devices can be accessed by any operating 586 system that implements a compatible front end. 587 588 The corresponding Linux frontend driver is enabled by the 589 CONFIG_XEN_NETDEV_FRONTEND configuration option. 590 591 The backend driver presents a standard network device 592 endpoint for each paravirtual network device to the driver 593 domain network stack. These can then be bridged or routed 594 etc in order to provide full network connectivity. 595 596 If you are compiling a kernel to run in a Xen network driver 597 domain (often this is domain 0) you should say Y here. To 598 compile this driver as a module, chose M here: the module 599 will be called xen-netback. 600 601config VMXNET3 602 tristate "VMware VMXNET3 ethernet driver" 603 depends on PCI && INET 604 depends on PAGE_SIZE_LESS_THAN_64KB 605 select PAGE_POOL 606 help 607 This driver supports VMware's vmxnet3 virtual ethernet NIC. 608 To compile this driver as a module, choose M here: the 609 module will be called vmxnet3. 610 611config FUJITSU_ES 612 tristate "FUJITSU Extended Socket Network Device driver" 613 depends on ACPI 614 help 615 This driver provides support for Extended Socket network device 616 on Extended Partitioning of FUJITSU PRIMEQUEST 2000 E2 series. 617 618source "drivers/net/thunderbolt/Kconfig" 619source "drivers/net/hyperv/Kconfig" 620 621config NETDEVSIM 622 tristate "Simulated networking device" 623 depends on DEBUG_FS 624 depends on INET 625 depends on IPV6 || IPV6=n 626 depends on PSAMPLE || PSAMPLE=n 627 depends on PTP_1588_CLOCK_MOCK || PTP_1588_CLOCK_MOCK=n 628 select NET_DEVLINK 629 select PAGE_POOL 630 select NET_SHAPER 631 help 632 This driver is a developer testing tool and software model that can 633 be used to test various control path networking APIs, especially 634 HW-offload related. 635 636 To compile this driver as a module, choose M here: the module 637 will be called netdevsim. 638 639config NET_FAILOVER 640 tristate "Failover driver" 641 select FAILOVER 642 help 643 This provides an automated failover mechanism via APIs to create 644 and destroy a failover master netdev and manages a primary and 645 standby slave netdevs that get registered via the generic failover 646 infrastructure. This can be used by paravirtual drivers to enable 647 an alternate low latency datapath. It also enables live migration of 648 a VM with direct attached VF by failing over to the paravirtual 649 datapath when the VF is unplugged. 650 651config NETDEV_LEGACY_INIT 652 bool 653 depends on ISA 654 help 655 Drivers that call netdev_boot_setup_check() should select this 656 symbol, everything else no longer needs it. 657 658endif # NETDEVICES 659