1# SPDX-License-Identifier: GPL-2.0-only 2# 3# Network device configuration 4# 5 6menuconfig NETDEVICES 7 default y if UML 8 depends on NET 9 bool "Network device support" 10 help 11 You can say N here if you don't intend to connect your Linux box to 12 any other computer at all. 13 14 You'll have to say Y if your computer contains a network card that 15 you want to use under Linux. If you are going to run SLIP or PPP over 16 telephone line or null modem cable you need say Y here. Connecting 17 two machines with parallel ports using PLIP needs this, as well as 18 AX.25/KISS for sending Internet traffic over amateur radio links. 19 20 See also "The Linux Network Administrator's Guide" by Olaf Kirch and 21 Terry Dawson. Available at <http://www.tldp.org/guides.html>. 22 23 If unsure, say Y. 24 25# All the following symbols are dependent on NETDEVICES - do not repeat 26# that for each of the symbols. 27if NETDEVICES 28 29config MII 30 tristate 31 32config NET_CORE 33 default y 34 bool "Network core driver support" 35 help 36 You can say N here if you do not intend to use any of the 37 networking core drivers (i.e. VLAN, bridging, bonding, etc.) 38 39if NET_CORE 40 41config BONDING 42 tristate "Bonding driver support" 43 depends on INET 44 depends on IPV6 || IPV6=n 45 depends on TLS || TLS_DEVICE=n 46 help 47 Say 'Y' or 'M' if you wish to be able to 'bond' multiple Ethernet 48 Channels together. This is called 'Etherchannel' by Cisco, 49 'Trunking' by Sun, 802.3ad by the IEEE, and 'Bonding' in Linux. 50 51 The driver supports multiple bonding modes to allow for both high 52 performance and high availability operation. 53 54 Refer to <file:Documentation/networking/bonding.rst> for more 55 information. 56 57 To compile this driver as a module, choose M here: the module 58 will be called bonding. 59 60config DUMMY 61 tristate "Dummy net driver support" 62 help 63 This is essentially a bit-bucket device (i.e. traffic you send to 64 this device is consigned into oblivion) with a configurable IP 65 address. It is most commonly used in order to make your currently 66 inactive SLIP address seem like a real address for local programs. 67 If you use SLIP or PPP, you might want to say Y here. It won't 68 enlarge your kernel. What a deal. Read about it in the Network 69 Administrator's Guide, available from 70 <http://www.tldp.org/docs.html#guide>. 71 72 To compile this driver as a module, choose M here: the module 73 will be called dummy. 74 75config WIREGUARD 76 tristate "WireGuard secure network tunnel" 77 depends on NET && INET 78 depends on IPV6 || !IPV6 79 depends on !KMSAN # KMSAN doesn't support the crypto configs below 80 select NET_UDP_TUNNEL 81 select DST_CACHE 82 select CRYPTO 83 select CRYPTO_LIB_CURVE25519 84 select CRYPTO_LIB_CHACHA20POLY1305 85 select CRYPTO_CHACHA20_X86_64 if X86 && 64BIT 86 select CRYPTO_POLY1305_X86_64 if X86 && 64BIT 87 select CRYPTO_BLAKE2S_X86 if X86 && 64BIT 88 select CRYPTO_CURVE25519_X86 if X86 && 64BIT 89 select CRYPTO_CHACHA20_NEON if ARM || (ARM64 && KERNEL_MODE_NEON) 90 select CRYPTO_POLY1305_NEON if ARM64 && KERNEL_MODE_NEON 91 select CRYPTO_POLY1305_ARM if ARM 92 select CRYPTO_BLAKE2S_ARM if ARM 93 select CRYPTO_CURVE25519_NEON if ARM && KERNEL_MODE_NEON 94 select CRYPTO_CHACHA_MIPS if CPU_MIPS32_R2 95 select CRYPTO_POLY1305_MIPS if MIPS 96 select CRYPTO_CHACHA_S390 if S390 97 help 98 WireGuard is a secure, fast, and easy to use replacement for IPSec 99 that uses modern cryptography and clever networking tricks. It's 100 designed to be fairly general purpose and abstract enough to fit most 101 use cases, while at the same time remaining extremely simple to 102 configure. See www.wireguard.com for more info. 103 104 It's safe to say Y or M here, as the driver is very lightweight and 105 is only in use when an administrator chooses to add an interface. 106 107config WIREGUARD_DEBUG 108 bool "Debugging checks and verbose messages" 109 depends on WIREGUARD 110 help 111 This will write log messages for handshake and other events 112 that occur for a WireGuard interface. It will also perform some 113 extra validation checks and unit tests at various points. This is 114 only useful for debugging. 115 116 Say N here unless you know what you're doing. 117 118config OVPN 119 tristate "OpenVPN data channel offload" 120 depends on NET && INET 121 depends on IPV6 || !IPV6 122 select DST_CACHE 123 select NET_UDP_TUNNEL 124 select CRYPTO 125 select CRYPTO_AES 126 select CRYPTO_GCM 127 select CRYPTO_CHACHA20POLY1305 128 help 129 This module enhances the performance of the OpenVPN userspace software 130 by offloading the data channel processing to kernelspace. 131 132config EQUALIZER 133 tristate "EQL (serial line load balancing) support" 134 help 135 If you have two serial connections to some other computer (this 136 usually requires two modems and two telephone lines) and you use 137 SLIP (the protocol for sending Internet traffic over telephone 138 lines) or PPP (a better SLIP) on them, you can make them behave like 139 one double speed connection using this driver. Naturally, this has 140 to be supported at the other end as well, either with a similar EQL 141 Linux driver or with a Livingston Portmaster 2e. 142 143 Say Y if you want this and read 144 <file:Documentation/networking/eql.rst>. You may also want to read 145 section 6.2 of the NET-3-HOWTO, available from 146 <http://www.tldp.org/docs.html#howto>. 147 148 To compile this driver as a module, choose M here: the module 149 will be called eql. If unsure, say N. 150 151config NET_FC 152 bool "Fibre Channel driver support" 153 depends on SCSI && PCI 154 help 155 Fibre Channel is a high speed serial protocol mainly used to connect 156 large storage devices to the computer; it is compatible with and 157 intended to replace SCSI. 158 159 If you intend to use Fibre Channel, you need to have a Fibre channel 160 adaptor card in your computer; say Y here and to the driver for your 161 adaptor below. You also should have said Y to "SCSI support" and 162 "SCSI generic support". 163 164config IFB 165 tristate "Intermediate Functional Block support" 166 depends on NET_ACT_MIRRED || NFT_FWD_NETDEV 167 select NET_REDIRECT 168 help 169 This is an intermediate driver that allows sharing of 170 resources. 171 To compile this driver as a module, choose M here: the module 172 will be called ifb. If you want to use more than one ifb 173 device at a time, you need to compile this driver as a module. 174 Instead of 'ifb', the devices will then be called 'ifb0', 175 'ifb1' etc. 176 Look at the iproute2 documentation directory for usage etc 177 178source "drivers/net/team/Kconfig" 179 180config MACVLAN 181 tristate "MAC-VLAN support" 182 help 183 This allows one to create virtual interfaces that map packets to 184 or from specific MAC addresses to a particular interface. 185 186 Macvlan devices can be added using the "ip" command from the 187 iproute2 package starting with the iproute2-2.6.23 release: 188 189 "ip link add link <real dev> [ address MAC ] [ NAME ] type macvlan" 190 191 To compile this driver as a module, choose M here: the module 192 will be called macvlan. 193 194config MACVTAP 195 tristate "MAC-VLAN based tap driver" 196 depends on MACVLAN 197 depends on INET 198 select TAP 199 help 200 This adds a specialized tap character device driver that is based 201 on the MAC-VLAN network interface, called macvtap. A macvtap device 202 can be added in the same way as a macvlan device, using 'type 203 macvtap', and then be accessed through the tap user space interface. 204 205 To compile this driver as a module, choose M here: the module 206 will be called macvtap. 207 208config IPVLAN_L3S 209 depends on NETFILTER 210 depends on IPVLAN 211 def_bool y 212 select NET_L3_MASTER_DEV 213 214config IPVLAN 215 tristate "IP-VLAN support" 216 depends on INET 217 depends on IPV6 || !IPV6 218 help 219 This allows one to create virtual devices off of a main interface 220 and packets will be delivered based on the dest L3 (IPv6/IPv4 addr) 221 on packets. All interfaces (including the main interface) share L2 222 making it transparent to the connected L2 switch. 223 224 Ipvlan devices can be added using the "ip" command from the 225 iproute2 package starting with the iproute2-3.19 release: 226 227 "ip link add link <main-dev> [ NAME ] type ipvlan" 228 229 To compile this driver as a module, choose M here: the module 230 will be called ipvlan. 231 232config IPVTAP 233 tristate "IP-VLAN based tap driver" 234 depends on IPVLAN 235 depends on INET 236 select TAP 237 help 238 This adds a specialized tap character device driver that is based 239 on the IP-VLAN network interface, called ipvtap. An ipvtap device 240 can be added in the same way as a ipvlan device, using 'type 241 ipvtap', and then be accessed through the tap user space interface. 242 243 To compile this driver as a module, choose M here: the module 244 will be called ipvtap. 245 246config VXLAN 247 tristate "Virtual eXtensible Local Area Network (VXLAN)" 248 depends on INET 249 select NET_UDP_TUNNEL 250 select GRO_CELLS 251 help 252 This allows one to create vxlan virtual interfaces that provide 253 Layer 2 Networks over Layer 3 Networks. VXLAN is often used 254 to tunnel virtual network infrastructure in virtualized environments. 255 For more information see: 256 http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-02 257 258 To compile this driver as a module, choose M here: the module 259 will be called vxlan. 260 261config GENEVE 262 tristate "Generic Network Virtualization Encapsulation" 263 depends on INET 264 depends on IPV6 || !IPV6 265 select NET_UDP_TUNNEL 266 select GRO_CELLS 267 help 268 This allows one to create geneve virtual interfaces that provide 269 Layer 2 Networks over Layer 3 Networks. GENEVE is often used 270 to tunnel virtual network infrastructure in virtualized environments. 271 For more information see: 272 http://tools.ietf.org/html/draft-gross-geneve-02 273 274 To compile this driver as a module, choose M here: the module 275 will be called geneve. 276 277config BAREUDP 278 tristate "Bare UDP Encapsulation" 279 depends on INET 280 depends on IPV6 || !IPV6 281 select NET_UDP_TUNNEL 282 select GRO_CELLS 283 help 284 This adds a bare UDP tunnel module for tunnelling different 285 kinds of traffic like MPLS, IP, etc. inside a UDP tunnel. 286 287 To compile this driver as a module, choose M here: the module 288 will be called bareudp. 289 290config GTP 291 tristate "GPRS Tunneling Protocol datapath (GTP-U)" 292 depends on INET 293 select NET_UDP_TUNNEL 294 help 295 This allows one to create gtp virtual interfaces that provide 296 the GPRS Tunneling Protocol datapath (GTP-U). This tunneling protocol 297 is used to prevent subscribers from accessing mobile carrier core 298 network infrastructure. This driver requires a userspace software that 299 implements the signaling protocol (GTP-C) to update its PDP context 300 base, such as OpenGGSN <http://git.osmocom.org/openggsn/). This 301 tunneling protocol is implemented according to the GSM TS 09.60 and 302 3GPP TS 29.060 standards. 303 304 To compile this drivers as a module, choose M here: the module 305 will be called gtp. 306 307config PFCP 308 tristate "Packet Forwarding Control Protocol (PFCP)" 309 depends on INET 310 select NET_UDP_TUNNEL 311 help 312 This allows one to create PFCP virtual interfaces that allows to 313 set up software and hardware offload of PFCP packets. 314 Note that this module does not support PFCP protocol in the kernel space. 315 There is no support for parsing any PFCP messages. 316 317 To compile this drivers as a module, choose M here: the module 318 will be called pfcp. 319 320config AMT 321 tristate "Automatic Multicast Tunneling (AMT)" 322 depends on INET && IP_MULTICAST 323 depends on IPV6 || !IPV6 324 select NET_UDP_TUNNEL 325 help 326 This allows one to create AMT(Automatic Multicast Tunneling) 327 virtual interfaces that provide multicast tunneling. 328 There are two roles, Gateway, and Relay. 329 Gateway Encapsulates IGMP/MLD traffic from listeners to the Relay. 330 Gateway Decapsulates multicast traffic from the Relay to Listeners. 331 Relay Encapsulates multicast traffic from Sources to Gateway. 332 Relay Decapsulates IGMP/MLD traffic from Gateway. 333 334 To compile this drivers as a module, choose M here: the module 335 will be called amt. 336 337config MACSEC 338 tristate "IEEE 802.1AE MAC-level encryption (MACsec)" 339 select CRYPTO 340 select CRYPTO_AES 341 select CRYPTO_GCM 342 select GRO_CELLS 343 help 344 MACsec is an encryption standard for Ethernet. 345 346config NETCONSOLE 347 tristate "Network console logging support" 348 help 349 If you want to log kernel messages over the network, enable this. 350 See <file:Documentation/networking/netconsole.rst> for details. 351 352config NETCONSOLE_DYNAMIC 353 bool "Dynamic reconfiguration of logging targets" 354 depends on NETCONSOLE && SYSFS && CONFIGFS_FS && \ 355 !(NETCONSOLE=y && CONFIGFS_FS=m) 356 help 357 This option enables the ability to dynamically reconfigure target 358 parameters (interface, IP addresses, port numbers, MAC addresses) 359 at runtime through a userspace interface exported using configfs. 360 See <file:Documentation/networking/netconsole.rst> for details. 361 362config NETCONSOLE_EXTENDED_LOG 363 bool "Set kernel extended message by default" 364 depends on NETCONSOLE 365 default n 366 help 367 Set extended log support for netconsole message. If this option is 368 set, log messages are transmitted with extended metadata header in a 369 format similar to /dev/kmsg. See 370 <file:Documentation/networking/netconsole.rst> for details. 371 372config NETCONSOLE_PREPEND_RELEASE 373 bool "Prepend kernel release version in the message by default" 374 depends on NETCONSOLE_EXTENDED_LOG 375 default n 376 help 377 Set kernel release to be prepended to each netconsole message by 378 default. If this option is set, the kernel release is prepended into 379 the first field of every netconsole message, so, the netconsole 380 server/peer can easily identify what kernel release is logging each 381 message. See <file:Documentation/networking/netconsole.rst> for 382 details. 383 384config NETPOLL 385 def_bool NETCONSOLE 386 387config NET_POLL_CONTROLLER 388 def_bool NETPOLL 389 390config NTB_NETDEV 391 tristate "Virtual Ethernet over NTB Transport" 392 depends on NTB_TRANSPORT 393 394config RIONET 395 tristate "RapidIO Ethernet over messaging driver support" 396 depends on RAPIDIO 397 398config RIONET_TX_SIZE 399 int "Number of outbound queue entries" 400 depends on RIONET 401 default "128" 402 403config RIONET_RX_SIZE 404 int "Number of inbound queue entries" 405 depends on RIONET 406 default "128" 407 408config TUN 409 tristate "Universal TUN/TAP device driver support" 410 depends on INET 411 select CRC32 412 help 413 TUN/TAP provides packet reception and transmission for user space 414 programs. It can be viewed as a simple Point-to-Point or Ethernet 415 device, which instead of receiving packets from a physical media, 416 receives them from user space program and instead of sending packets 417 via physical media writes them to the user space program. 418 419 When a program opens /dev/net/tun, driver creates and registers 420 corresponding net device tunX or tapX. After a program closed above 421 devices, driver will automatically delete tunXX or tapXX device and 422 all routes corresponding to it. 423 424 Please read <file:Documentation/networking/tuntap.rst> for more 425 information. 426 427 To compile this driver as a module, choose M here: the module 428 will be called tun. 429 430 If you don't know what to use this for, you don't need it. 431 432config TAP 433 tristate 434 help 435 This option is selected by any driver implementing tap user space 436 interface for a virtual interface to re-use core tap functionality. 437 438config TUN_VNET_CROSS_LE 439 bool "Support for cross-endian vnet headers on little-endian kernels" 440 default n 441 help 442 This option allows TUN/TAP and MACVTAP device drivers in a 443 little-endian kernel to parse vnet headers that come from a 444 big-endian legacy virtio device. 445 446 Userspace programs can control the feature using the TUNSETVNETBE 447 and TUNGETVNETBE ioctls. 448 449 Unless you have a little-endian system hosting a big-endian virtual 450 machine with a legacy virtio NIC, you should say N. 451 452config VETH 453 tristate "Virtual ethernet pair device" 454 select PAGE_POOL 455 help 456 This device is a local ethernet tunnel. Devices are created in pairs. 457 When one end receives the packet it appears on its pair and vice 458 versa. 459 460config VIRTIO_NET 461 tristate "Virtio network driver" 462 depends on VIRTIO 463 select NET_FAILOVER 464 select DIMLIB 465 help 466 This is the virtual network driver for virtio. It can be used with 467 QEMU based VMMs (like KVM or Xen). Say Y or M. 468 469config NLMON 470 tristate "Virtual netlink monitoring device" 471 help 472 This option enables a monitoring net device for netlink skbs. The 473 purpose of this is to analyze netlink messages with packet sockets. 474 Thus applications like tcpdump will be able to see local netlink 475 messages if they tap into the netlink device, record pcaps for further 476 diagnostics, etc. This is mostly intended for developers or support 477 to debug netlink issues. If unsure, say N. 478 479config NETKIT 480 bool "BPF-programmable network device" 481 depends on BPF_SYSCALL 482 help 483 The netkit device is a virtual networking device where BPF programs 484 can be attached to the device(s) transmission routine in order to 485 implement the driver's internal logic. The device can be configured 486 to operate in L3 or L2 mode. If unsure, say N. 487 488config NET_VRF 489 tristate "Virtual Routing and Forwarding (Lite)" 490 depends on IP_MULTIPLE_TABLES 491 depends on NET_L3_MASTER_DEV 492 depends on IPV6 || IPV6=n 493 depends on IPV6_MULTIPLE_TABLES || IPV6=n 494 help 495 This option enables the support for mapping interfaces into VRF's. The 496 support enables VRF devices. 497 498config VSOCKMON 499 tristate "Virtual vsock monitoring device" 500 depends on VHOST_VSOCK 501 help 502 This option enables a monitoring net device for vsock sockets. It is 503 mostly intended for developers or support to debug vsock issues. If 504 unsure, say N. 505 506config MHI_NET 507 tristate "MHI network driver" 508 depends on MHI_BUS 509 help 510 This is the network driver for MHI bus. It can be used with 511 QCOM based WWAN modems for IP or QMAP/rmnet protocol (like SDX55). 512 Say Y or M. 513 514endif # NET_CORE 515 516config SUNGEM_PHY 517 tristate 518 519source "drivers/net/arcnet/Kconfig" 520 521source "drivers/atm/Kconfig" 522 523source "drivers/net/caif/Kconfig" 524 525source "drivers/net/dsa/Kconfig" 526 527source "drivers/net/ethernet/Kconfig" 528 529source "drivers/net/fddi/Kconfig" 530 531source "drivers/net/hippi/Kconfig" 532 533source "drivers/net/ipa/Kconfig" 534 535source "drivers/net/phy/Kconfig" 536 537source "drivers/net/pse-pd/Kconfig" 538 539source "drivers/net/can/Kconfig" 540 541source "drivers/net/mctp/Kconfig" 542 543source "drivers/net/mdio/Kconfig" 544 545source "drivers/net/pcs/Kconfig" 546 547source "drivers/net/plip/Kconfig" 548 549source "drivers/net/ppp/Kconfig" 550 551source "drivers/net/slip/Kconfig" 552 553source "drivers/s390/net/Kconfig" 554 555source "drivers/net/usb/Kconfig" 556 557source "drivers/net/wireless/Kconfig" 558 559source "drivers/net/wan/Kconfig" 560 561source "drivers/net/ieee802154/Kconfig" 562 563source "drivers/net/wwan/Kconfig" 564 565config XEN_NETDEV_FRONTEND 566 tristate "Xen network device frontend driver" 567 depends on XEN 568 select XEN_XENBUS_FRONTEND 569 select PAGE_POOL 570 default y 571 help 572 This driver provides support for Xen paravirtual network 573 devices exported by a Xen network driver domain (often 574 domain 0). 575 576 The corresponding Linux backend driver is enabled by the 577 CONFIG_XEN_NETDEV_BACKEND option. 578 579 If you are compiling a kernel for use as Xen guest, you 580 should say Y here. To compile this driver as a module, chose 581 M here: the module will be called xen-netfront. 582 583config XEN_NETDEV_BACKEND 584 tristate "Xen backend network device" 585 depends on XEN_BACKEND 586 help 587 This driver allows the kernel to act as a Xen network driver 588 domain which exports paravirtual network devices to other 589 Xen domains. These devices can be accessed by any operating 590 system that implements a compatible front end. 591 592 The corresponding Linux frontend driver is enabled by the 593 CONFIG_XEN_NETDEV_FRONTEND configuration option. 594 595 The backend driver presents a standard network device 596 endpoint for each paravirtual network device to the driver 597 domain network stack. These can then be bridged or routed 598 etc in order to provide full network connectivity. 599 600 If you are compiling a kernel to run in a Xen network driver 601 domain (often this is domain 0) you should say Y here. To 602 compile this driver as a module, chose M here: the module 603 will be called xen-netback. 604 605config VMXNET3 606 tristate "VMware VMXNET3 ethernet driver" 607 depends on PCI && INET 608 depends on PAGE_SIZE_LESS_THAN_64KB 609 select PAGE_POOL 610 help 611 This driver supports VMware's vmxnet3 virtual ethernet NIC. 612 To compile this driver as a module, choose M here: the 613 module will be called vmxnet3. 614 615config FUJITSU_ES 616 tristate "FUJITSU Extended Socket Network Device driver" 617 depends on ACPI 618 help 619 This driver provides support for Extended Socket network device 620 on Extended Partitioning of FUJITSU PRIMEQUEST 2000 E2 series. 621 622source "drivers/net/thunderbolt/Kconfig" 623source "drivers/net/hyperv/Kconfig" 624 625config NETDEVSIM 626 tristate "Simulated networking device" 627 depends on DEBUG_FS 628 depends on INET 629 depends on IPV6 || IPV6=n 630 depends on PSAMPLE || PSAMPLE=n 631 depends on PTP_1588_CLOCK_MOCK || PTP_1588_CLOCK_MOCK=n 632 select NET_DEVLINK 633 select PAGE_POOL 634 select NET_SHAPER 635 help 636 This driver is a developer testing tool and software model that can 637 be used to test various control path networking APIs, especially 638 HW-offload related. 639 640 To compile this driver as a module, choose M here: the module 641 will be called netdevsim. 642 643config NET_FAILOVER 644 tristate "Failover driver" 645 select FAILOVER 646 help 647 This provides an automated failover mechanism via APIs to create 648 and destroy a failover master netdev and manages a primary and 649 standby slave netdevs that get registered via the generic failover 650 infrastructure. This can be used by paravirtual drivers to enable 651 an alternate low latency datapath. It also enables live migration of 652 a VM with direct attached VF by failing over to the paravirtual 653 datapath when the VF is unplugged. 654 655config NETDEV_LEGACY_INIT 656 bool 657 depends on ISA 658 help 659 Drivers that call netdev_boot_setup_check() should select this 660 symbol, everything else no longer needs it. 661 662endif # NETDEVICES 663