1# SPDX-License-Identifier: GPL-2.0-only 2# 3# Network device configuration 4# 5 6menuconfig NETDEVICES 7 default y if UML 8 depends on NET 9 bool "Network device support" 10 help 11 You can say N here if you don't intend to connect your Linux box to 12 any other computer at all. 13 14 You'll have to say Y if your computer contains a network card that 15 you want to use under Linux. If you are going to run SLIP or PPP over 16 telephone line or null modem cable you need say Y here. Connecting 17 two machines with parallel ports using PLIP needs this, as well as 18 AX.25/KISS for sending Internet traffic over amateur radio links. 19 20 See also "The Linux Network Administrator's Guide" by Olaf Kirch and 21 Terry Dawson. Available at <http://www.tldp.org/guides.html>. 22 23 If unsure, say Y. 24 25# All the following symbols are dependent on NETDEVICES - do not repeat 26# that for each of the symbols. 27if NETDEVICES 28 29config MII 30 tristate 31 32config NET_CORE 33 default y 34 bool "Network core driver support" 35 help 36 You can say N here if you do not intend to use any of the 37 networking core drivers (i.e. VLAN, bridging, bonding, etc.) 38 39if NET_CORE 40 41config BONDING 42 tristate "Bonding driver support" 43 depends on INET 44 depends on IPV6 || IPV6=n 45 depends on TLS || TLS_DEVICE=n 46 help 47 Say 'Y' or 'M' if you wish to be able to 'bond' multiple Ethernet 48 Channels together. This is called 'Etherchannel' by Cisco, 49 'Trunking' by Sun, 802.3ad by the IEEE, and 'Bonding' in Linux. 50 51 The driver supports multiple bonding modes to allow for both high 52 performance and high availability operation. 53 54 Refer to <file:Documentation/networking/bonding.rst> for more 55 information. 56 57 To compile this driver as a module, choose M here: the module 58 will be called bonding. 59 60config DUMMY 61 tristate "Dummy net driver support" 62 help 63 This is essentially a bit-bucket device (i.e. traffic you send to 64 this device is consigned into oblivion) with a configurable IP 65 address. It is most commonly used in order to make your currently 66 inactive SLIP address seem like a real address for local programs. 67 If you use SLIP or PPP, you might want to say Y here. It won't 68 enlarge your kernel. What a deal. Read about it in the Network 69 Administrator's Guide, available from 70 <http://www.tldp.org/docs.html#guide>. 71 72 To compile this driver as a module, choose M here: the module 73 will be called dummy. 74 75config WIREGUARD 76 tristate "WireGuard secure network tunnel" 77 depends on NET && INET 78 depends on IPV6 || !IPV6 79 depends on !KMSAN # KMSAN doesn't support the crypto configs below 80 select NET_UDP_TUNNEL 81 select DST_CACHE 82 select CRYPTO 83 select CRYPTO_LIB_CURVE25519 84 select CRYPTO_LIB_CHACHA20POLY1305 85 select CRYPTO_CHACHA20_X86_64 if X86 && 64BIT 86 select CRYPTO_POLY1305_X86_64 if X86 && 64BIT 87 select CRYPTO_BLAKE2S_X86 if X86 && 64BIT 88 select CRYPTO_CURVE25519_X86 if X86 && 64BIT 89 select CRYPTO_CHACHA20_NEON if ARM || (ARM64 && KERNEL_MODE_NEON) 90 select CRYPTO_POLY1305_NEON if ARM64 && KERNEL_MODE_NEON 91 select CRYPTO_POLY1305_ARM if ARM 92 select CRYPTO_BLAKE2S_ARM if ARM 93 select CRYPTO_CURVE25519_NEON if ARM && KERNEL_MODE_NEON 94 select CRYPTO_CHACHA_MIPS if CPU_MIPS32_R2 95 select CRYPTO_POLY1305_MIPS if MIPS 96 select CRYPTO_CHACHA_S390 if S390 97 help 98 WireGuard is a secure, fast, and easy to use replacement for IPSec 99 that uses modern cryptography and clever networking tricks. It's 100 designed to be fairly general purpose and abstract enough to fit most 101 use cases, while at the same time remaining extremely simple to 102 configure. See www.wireguard.com for more info. 103 104 It's safe to say Y or M here, as the driver is very lightweight and 105 is only in use when an administrator chooses to add an interface. 106 107config WIREGUARD_DEBUG 108 bool "Debugging checks and verbose messages" 109 depends on WIREGUARD 110 help 111 This will write log messages for handshake and other events 112 that occur for a WireGuard interface. It will also perform some 113 extra validation checks and unit tests at various points. This is 114 only useful for debugging. 115 116 Say N here unless you know what you're doing. 117 118config OVPN 119 tristate "OpenVPN data channel offload" 120 depends on NET && INET 121 depends on IPV6 || !IPV6 122 select DST_CACHE 123 help 124 This module enhances the performance of the OpenVPN userspace software 125 by offloading the data channel processing to kernelspace. 126 127config EQUALIZER 128 tristate "EQL (serial line load balancing) support" 129 help 130 If you have two serial connections to some other computer (this 131 usually requires two modems and two telephone lines) and you use 132 SLIP (the protocol for sending Internet traffic over telephone 133 lines) or PPP (a better SLIP) on them, you can make them behave like 134 one double speed connection using this driver. Naturally, this has 135 to be supported at the other end as well, either with a similar EQL 136 Linux driver or with a Livingston Portmaster 2e. 137 138 Say Y if you want this and read 139 <file:Documentation/networking/eql.rst>. You may also want to read 140 section 6.2 of the NET-3-HOWTO, available from 141 <http://www.tldp.org/docs.html#howto>. 142 143 To compile this driver as a module, choose M here: the module 144 will be called eql. If unsure, say N. 145 146config NET_FC 147 bool "Fibre Channel driver support" 148 depends on SCSI && PCI 149 help 150 Fibre Channel is a high speed serial protocol mainly used to connect 151 large storage devices to the computer; it is compatible with and 152 intended to replace SCSI. 153 154 If you intend to use Fibre Channel, you need to have a Fibre channel 155 adaptor card in your computer; say Y here and to the driver for your 156 adaptor below. You also should have said Y to "SCSI support" and 157 "SCSI generic support". 158 159config IFB 160 tristate "Intermediate Functional Block support" 161 depends on NET_ACT_MIRRED || NFT_FWD_NETDEV 162 select NET_REDIRECT 163 help 164 This is an intermediate driver that allows sharing of 165 resources. 166 To compile this driver as a module, choose M here: the module 167 will be called ifb. If you want to use more than one ifb 168 device at a time, you need to compile this driver as a module. 169 Instead of 'ifb', the devices will then be called 'ifb0', 170 'ifb1' etc. 171 Look at the iproute2 documentation directory for usage etc 172 173source "drivers/net/team/Kconfig" 174 175config MACVLAN 176 tristate "MAC-VLAN support" 177 help 178 This allows one to create virtual interfaces that map packets to 179 or from specific MAC addresses to a particular interface. 180 181 Macvlan devices can be added using the "ip" command from the 182 iproute2 package starting with the iproute2-2.6.23 release: 183 184 "ip link add link <real dev> [ address MAC ] [ NAME ] type macvlan" 185 186 To compile this driver as a module, choose M here: the module 187 will be called macvlan. 188 189config MACVTAP 190 tristate "MAC-VLAN based tap driver" 191 depends on MACVLAN 192 depends on INET 193 select TAP 194 help 195 This adds a specialized tap character device driver that is based 196 on the MAC-VLAN network interface, called macvtap. A macvtap device 197 can be added in the same way as a macvlan device, using 'type 198 macvtap', and then be accessed through the tap user space interface. 199 200 To compile this driver as a module, choose M here: the module 201 will be called macvtap. 202 203config IPVLAN_L3S 204 depends on NETFILTER 205 depends on IPVLAN 206 def_bool y 207 select NET_L3_MASTER_DEV 208 209config IPVLAN 210 tristate "IP-VLAN support" 211 depends on INET 212 depends on IPV6 || !IPV6 213 help 214 This allows one to create virtual devices off of a main interface 215 and packets will be delivered based on the dest L3 (IPv6/IPv4 addr) 216 on packets. All interfaces (including the main interface) share L2 217 making it transparent to the connected L2 switch. 218 219 Ipvlan devices can be added using the "ip" command from the 220 iproute2 package starting with the iproute2-3.19 release: 221 222 "ip link add link <main-dev> [ NAME ] type ipvlan" 223 224 To compile this driver as a module, choose M here: the module 225 will be called ipvlan. 226 227config IPVTAP 228 tristate "IP-VLAN based tap driver" 229 depends on IPVLAN 230 depends on INET 231 select TAP 232 help 233 This adds a specialized tap character device driver that is based 234 on the IP-VLAN network interface, called ipvtap. An ipvtap device 235 can be added in the same way as a ipvlan device, using 'type 236 ipvtap', and then be accessed through the tap user space interface. 237 238 To compile this driver as a module, choose M here: the module 239 will be called ipvtap. 240 241config VXLAN 242 tristate "Virtual eXtensible Local Area Network (VXLAN)" 243 depends on INET 244 select NET_UDP_TUNNEL 245 select GRO_CELLS 246 help 247 This allows one to create vxlan virtual interfaces that provide 248 Layer 2 Networks over Layer 3 Networks. VXLAN is often used 249 to tunnel virtual network infrastructure in virtualized environments. 250 For more information see: 251 http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-02 252 253 To compile this driver as a module, choose M here: the module 254 will be called vxlan. 255 256config GENEVE 257 tristate "Generic Network Virtualization Encapsulation" 258 depends on INET 259 depends on IPV6 || !IPV6 260 select NET_UDP_TUNNEL 261 select GRO_CELLS 262 help 263 This allows one to create geneve virtual interfaces that provide 264 Layer 2 Networks over Layer 3 Networks. GENEVE is often used 265 to tunnel virtual network infrastructure in virtualized environments. 266 For more information see: 267 http://tools.ietf.org/html/draft-gross-geneve-02 268 269 To compile this driver as a module, choose M here: the module 270 will be called geneve. 271 272config BAREUDP 273 tristate "Bare UDP Encapsulation" 274 depends on INET 275 depends on IPV6 || !IPV6 276 select NET_UDP_TUNNEL 277 select GRO_CELLS 278 help 279 This adds a bare UDP tunnel module for tunnelling different 280 kinds of traffic like MPLS, IP, etc. inside a UDP tunnel. 281 282 To compile this driver as a module, choose M here: the module 283 will be called bareudp. 284 285config GTP 286 tristate "GPRS Tunneling Protocol datapath (GTP-U)" 287 depends on INET 288 select NET_UDP_TUNNEL 289 help 290 This allows one to create gtp virtual interfaces that provide 291 the GPRS Tunneling Protocol datapath (GTP-U). This tunneling protocol 292 is used to prevent subscribers from accessing mobile carrier core 293 network infrastructure. This driver requires a userspace software that 294 implements the signaling protocol (GTP-C) to update its PDP context 295 base, such as OpenGGSN <http://git.osmocom.org/openggsn/). This 296 tunneling protocol is implemented according to the GSM TS 09.60 and 297 3GPP TS 29.060 standards. 298 299 To compile this drivers as a module, choose M here: the module 300 will be called gtp. 301 302config PFCP 303 tristate "Packet Forwarding Control Protocol (PFCP)" 304 depends on INET 305 select NET_UDP_TUNNEL 306 help 307 This allows one to create PFCP virtual interfaces that allows to 308 set up software and hardware offload of PFCP packets. 309 Note that this module does not support PFCP protocol in the kernel space. 310 There is no support for parsing any PFCP messages. 311 312 To compile this drivers as a module, choose M here: the module 313 will be called pfcp. 314 315config AMT 316 tristate "Automatic Multicast Tunneling (AMT)" 317 depends on INET && IP_MULTICAST 318 depends on IPV6 || !IPV6 319 select NET_UDP_TUNNEL 320 help 321 This allows one to create AMT(Automatic Multicast Tunneling) 322 virtual interfaces that provide multicast tunneling. 323 There are two roles, Gateway, and Relay. 324 Gateway Encapsulates IGMP/MLD traffic from listeners to the Relay. 325 Gateway Decapsulates multicast traffic from the Relay to Listeners. 326 Relay Encapsulates multicast traffic from Sources to Gateway. 327 Relay Decapsulates IGMP/MLD traffic from Gateway. 328 329 To compile this drivers as a module, choose M here: the module 330 will be called amt. 331 332config MACSEC 333 tristate "IEEE 802.1AE MAC-level encryption (MACsec)" 334 select CRYPTO 335 select CRYPTO_AES 336 select CRYPTO_GCM 337 select GRO_CELLS 338 help 339 MACsec is an encryption standard for Ethernet. 340 341config NETCONSOLE 342 tristate "Network console logging support" 343 help 344 If you want to log kernel messages over the network, enable this. 345 See <file:Documentation/networking/netconsole.rst> for details. 346 347config NETCONSOLE_DYNAMIC 348 bool "Dynamic reconfiguration of logging targets" 349 depends on NETCONSOLE && SYSFS && CONFIGFS_FS && \ 350 !(NETCONSOLE=y && CONFIGFS_FS=m) 351 help 352 This option enables the ability to dynamically reconfigure target 353 parameters (interface, IP addresses, port numbers, MAC addresses) 354 at runtime through a userspace interface exported using configfs. 355 See <file:Documentation/networking/netconsole.rst> for details. 356 357config NETCONSOLE_EXTENDED_LOG 358 bool "Set kernel extended message by default" 359 depends on NETCONSOLE 360 default n 361 help 362 Set extended log support for netconsole message. If this option is 363 set, log messages are transmitted with extended metadata header in a 364 format similar to /dev/kmsg. See 365 <file:Documentation/networking/netconsole.rst> for details. 366 367config NETCONSOLE_PREPEND_RELEASE 368 bool "Prepend kernel release version in the message by default" 369 depends on NETCONSOLE_EXTENDED_LOG 370 default n 371 help 372 Set kernel release to be prepended to each netconsole message by 373 default. If this option is set, the kernel release is prepended into 374 the first field of every netconsole message, so, the netconsole 375 server/peer can easily identify what kernel release is logging each 376 message. See <file:Documentation/networking/netconsole.rst> for 377 details. 378 379config NETPOLL 380 def_bool NETCONSOLE 381 382config NET_POLL_CONTROLLER 383 def_bool NETPOLL 384 385config NTB_NETDEV 386 tristate "Virtual Ethernet over NTB Transport" 387 depends on NTB_TRANSPORT 388 389config RIONET 390 tristate "RapidIO Ethernet over messaging driver support" 391 depends on RAPIDIO 392 393config RIONET_TX_SIZE 394 int "Number of outbound queue entries" 395 depends on RIONET 396 default "128" 397 398config RIONET_RX_SIZE 399 int "Number of inbound queue entries" 400 depends on RIONET 401 default "128" 402 403config TUN 404 tristate "Universal TUN/TAP device driver support" 405 depends on INET 406 select CRC32 407 help 408 TUN/TAP provides packet reception and transmission for user space 409 programs. It can be viewed as a simple Point-to-Point or Ethernet 410 device, which instead of receiving packets from a physical media, 411 receives them from user space program and instead of sending packets 412 via physical media writes them to the user space program. 413 414 When a program opens /dev/net/tun, driver creates and registers 415 corresponding net device tunX or tapX. After a program closed above 416 devices, driver will automatically delete tunXX or tapXX device and 417 all routes corresponding to it. 418 419 Please read <file:Documentation/networking/tuntap.rst> for more 420 information. 421 422 To compile this driver as a module, choose M here: the module 423 will be called tun. 424 425 If you don't know what to use this for, you don't need it. 426 427config TAP 428 tristate 429 help 430 This option is selected by any driver implementing tap user space 431 interface for a virtual interface to re-use core tap functionality. 432 433config TUN_VNET_CROSS_LE 434 bool "Support for cross-endian vnet headers on little-endian kernels" 435 default n 436 help 437 This option allows TUN/TAP and MACVTAP device drivers in a 438 little-endian kernel to parse vnet headers that come from a 439 big-endian legacy virtio device. 440 441 Userspace programs can control the feature using the TUNSETVNETBE 442 and TUNGETVNETBE ioctls. 443 444 Unless you have a little-endian system hosting a big-endian virtual 445 machine with a legacy virtio NIC, you should say N. 446 447config VETH 448 tristate "Virtual ethernet pair device" 449 select PAGE_POOL 450 help 451 This device is a local ethernet tunnel. Devices are created in pairs. 452 When one end receives the packet it appears on its pair and vice 453 versa. 454 455config VIRTIO_NET 456 tristate "Virtio network driver" 457 depends on VIRTIO 458 select NET_FAILOVER 459 select DIMLIB 460 help 461 This is the virtual network driver for virtio. It can be used with 462 QEMU based VMMs (like KVM or Xen). Say Y or M. 463 464config NLMON 465 tristate "Virtual netlink monitoring device" 466 help 467 This option enables a monitoring net device for netlink skbs. The 468 purpose of this is to analyze netlink messages with packet sockets. 469 Thus applications like tcpdump will be able to see local netlink 470 messages if they tap into the netlink device, record pcaps for further 471 diagnostics, etc. This is mostly intended for developers or support 472 to debug netlink issues. If unsure, say N. 473 474config NETKIT 475 bool "BPF-programmable network device" 476 depends on BPF_SYSCALL 477 help 478 The netkit device is a virtual networking device where BPF programs 479 can be attached to the device(s) transmission routine in order to 480 implement the driver's internal logic. The device can be configured 481 to operate in L3 or L2 mode. If unsure, say N. 482 483config NET_VRF 484 tristate "Virtual Routing and Forwarding (Lite)" 485 depends on IP_MULTIPLE_TABLES 486 depends on NET_L3_MASTER_DEV 487 depends on IPV6 || IPV6=n 488 depends on IPV6_MULTIPLE_TABLES || IPV6=n 489 help 490 This option enables the support for mapping interfaces into VRF's. The 491 support enables VRF devices. 492 493config VSOCKMON 494 tristate "Virtual vsock monitoring device" 495 depends on VHOST_VSOCK 496 help 497 This option enables a monitoring net device for vsock sockets. It is 498 mostly intended for developers or support to debug vsock issues. If 499 unsure, say N. 500 501config MHI_NET 502 tristate "MHI network driver" 503 depends on MHI_BUS 504 help 505 This is the network driver for MHI bus. It can be used with 506 QCOM based WWAN modems for IP or QMAP/rmnet protocol (like SDX55). 507 Say Y or M. 508 509endif # NET_CORE 510 511config SUNGEM_PHY 512 tristate 513 514source "drivers/net/arcnet/Kconfig" 515 516source "drivers/atm/Kconfig" 517 518source "drivers/net/caif/Kconfig" 519 520source "drivers/net/dsa/Kconfig" 521 522source "drivers/net/ethernet/Kconfig" 523 524source "drivers/net/fddi/Kconfig" 525 526source "drivers/net/hippi/Kconfig" 527 528source "drivers/net/ipa/Kconfig" 529 530source "drivers/net/phy/Kconfig" 531 532source "drivers/net/pse-pd/Kconfig" 533 534source "drivers/net/can/Kconfig" 535 536source "drivers/net/mctp/Kconfig" 537 538source "drivers/net/mdio/Kconfig" 539 540source "drivers/net/pcs/Kconfig" 541 542source "drivers/net/plip/Kconfig" 543 544source "drivers/net/ppp/Kconfig" 545 546source "drivers/net/slip/Kconfig" 547 548source "drivers/s390/net/Kconfig" 549 550source "drivers/net/usb/Kconfig" 551 552source "drivers/net/wireless/Kconfig" 553 554source "drivers/net/wan/Kconfig" 555 556source "drivers/net/ieee802154/Kconfig" 557 558source "drivers/net/wwan/Kconfig" 559 560config XEN_NETDEV_FRONTEND 561 tristate "Xen network device frontend driver" 562 depends on XEN 563 select XEN_XENBUS_FRONTEND 564 select PAGE_POOL 565 default y 566 help 567 This driver provides support for Xen paravirtual network 568 devices exported by a Xen network driver domain (often 569 domain 0). 570 571 The corresponding Linux backend driver is enabled by the 572 CONFIG_XEN_NETDEV_BACKEND option. 573 574 If you are compiling a kernel for use as Xen guest, you 575 should say Y here. To compile this driver as a module, chose 576 M here: the module will be called xen-netfront. 577 578config XEN_NETDEV_BACKEND 579 tristate "Xen backend network device" 580 depends on XEN_BACKEND 581 help 582 This driver allows the kernel to act as a Xen network driver 583 domain which exports paravirtual network devices to other 584 Xen domains. These devices can be accessed by any operating 585 system that implements a compatible front end. 586 587 The corresponding Linux frontend driver is enabled by the 588 CONFIG_XEN_NETDEV_FRONTEND configuration option. 589 590 The backend driver presents a standard network device 591 endpoint for each paravirtual network device to the driver 592 domain network stack. These can then be bridged or routed 593 etc in order to provide full network connectivity. 594 595 If you are compiling a kernel to run in a Xen network driver 596 domain (often this is domain 0) you should say Y here. To 597 compile this driver as a module, chose M here: the module 598 will be called xen-netback. 599 600config VMXNET3 601 tristate "VMware VMXNET3 ethernet driver" 602 depends on PCI && INET 603 depends on PAGE_SIZE_LESS_THAN_64KB 604 select PAGE_POOL 605 help 606 This driver supports VMware's vmxnet3 virtual ethernet NIC. 607 To compile this driver as a module, choose M here: the 608 module will be called vmxnet3. 609 610config FUJITSU_ES 611 tristate "FUJITSU Extended Socket Network Device driver" 612 depends on ACPI 613 help 614 This driver provides support for Extended Socket network device 615 on Extended Partitioning of FUJITSU PRIMEQUEST 2000 E2 series. 616 617source "drivers/net/thunderbolt/Kconfig" 618source "drivers/net/hyperv/Kconfig" 619 620config NETDEVSIM 621 tristate "Simulated networking device" 622 depends on DEBUG_FS 623 depends on INET 624 depends on IPV6 || IPV6=n 625 depends on PSAMPLE || PSAMPLE=n 626 depends on PTP_1588_CLOCK_MOCK || PTP_1588_CLOCK_MOCK=n 627 select NET_DEVLINK 628 select PAGE_POOL 629 select NET_SHAPER 630 help 631 This driver is a developer testing tool and software model that can 632 be used to test various control path networking APIs, especially 633 HW-offload related. 634 635 To compile this driver as a module, choose M here: the module 636 will be called netdevsim. 637 638config NET_FAILOVER 639 tristate "Failover driver" 640 select FAILOVER 641 help 642 This provides an automated failover mechanism via APIs to create 643 and destroy a failover master netdev and manages a primary and 644 standby slave netdevs that get registered via the generic failover 645 infrastructure. This can be used by paravirtual drivers to enable 646 an alternate low latency datapath. It also enables live migration of 647 a VM with direct attached VF by failing over to the paravirtual 648 datapath when the VF is unplugged. 649 650config NETDEV_LEGACY_INIT 651 bool 652 depends on ISA 653 help 654 Drivers that call netdev_boot_setup_check() should select this 655 symbol, everything else no longer needs it. 656 657endif # NETDEVICES 658