xref: /linux/drivers/net/Kconfig (revision 8534731dbf2d52a539b94defd06d2a8d3514aacb)
1# SPDX-License-Identifier: GPL-2.0-only
2#
3# Network device configuration
4#
5
6menuconfig NETDEVICES
7	default y if UML
8	depends on NET
9	bool "Network device support"
10	help
11	  You can say N here if you don't intend to connect your Linux box to
12	  any other computer at all.
13
14	  You'll have to say Y if your computer contains a network card that
15	  you want to use under Linux. If you are going to run SLIP or PPP over
16	  telephone line or null modem cable you need say Y here. Connecting
17	  two machines with parallel ports using PLIP needs this, as well as
18	  AX.25/KISS for sending Internet traffic over amateur radio links.
19
20	  See also "The Linux Network Administrator's Guide" by Olaf Kirch and
21	  Terry Dawson. Available at <http://www.tldp.org/guides.html>.
22
23	  If unsure, say Y.
24
25# All the following symbols are dependent on NETDEVICES - do not repeat
26# that for each of the symbols.
27if NETDEVICES
28
29config MII
30	tristate
31
32config NET_CORE
33	default y
34	bool "Network core driver support"
35	help
36	  You can say N here if you do not intend to use any of the
37	  networking core drivers (i.e. VLAN, bridging, bonding, etc.)
38
39if NET_CORE
40
41config BONDING
42	tristate "Bonding driver support"
43	depends on INET
44	depends on IPV6 || IPV6=n
45	depends on TLS || TLS_DEVICE=n
46	help
47	  Say 'Y' or 'M' if you wish to be able to 'bond' multiple Ethernet
48	  Channels together. This is called 'Etherchannel' by Cisco,
49	  'Trunking' by Sun, 802.3ad by the IEEE, and 'Bonding' in Linux.
50
51	  The driver supports multiple bonding modes to allow for both high
52	  performance and high availability operation.
53
54	  Refer to <file:Documentation/networking/bonding.rst> for more
55	  information.
56
57	  To compile this driver as a module, choose M here: the module
58	  will be called bonding.
59
60config DUMMY
61	tristate "Dummy net driver support"
62	help
63	  This is essentially a bit-bucket device (i.e. traffic you send to
64	  this device is consigned into oblivion) with a configurable IP
65	  address. It is most commonly used in order to make your currently
66	  inactive SLIP address seem like a real address for local programs.
67	  If you use SLIP or PPP, you might want to say Y here. It won't
68	  enlarge your kernel. What a deal. Read about it in the Network
69	  Administrator's Guide, available from
70	  <http://www.tldp.org/docs.html#guide>.
71
72	  To compile this driver as a module, choose M here: the module
73	  will be called dummy.
74
75config WIREGUARD
76	tristate "WireGuard secure network tunnel"
77	depends on NET && INET
78	depends on IPV6 || !IPV6
79	depends on !KMSAN # KMSAN doesn't support the crypto configs below
80	select NET_UDP_TUNNEL
81	select DST_CACHE
82	select CRYPTO
83	select CRYPTO_LIB_CURVE25519
84	select CRYPTO_LIB_CHACHA20POLY1305
85	select CRYPTO_CHACHA20_X86_64 if X86 && 64BIT
86	select CRYPTO_POLY1305_X86_64 if X86 && 64BIT
87	select CRYPTO_BLAKE2S_X86 if X86 && 64BIT
88	select CRYPTO_CURVE25519_X86 if X86 && 64BIT
89	select CRYPTO_CHACHA20_NEON if ARM || (ARM64 && KERNEL_MODE_NEON)
90	select CRYPTO_POLY1305_NEON if ARM64 && KERNEL_MODE_NEON
91	select CRYPTO_POLY1305_ARM if ARM
92	select CRYPTO_BLAKE2S_ARM if ARM
93	select CRYPTO_CURVE25519_NEON if ARM && KERNEL_MODE_NEON
94	select CRYPTO_CHACHA_MIPS if CPU_MIPS32_R2
95	select CRYPTO_POLY1305_MIPS if MIPS
96	select CRYPTO_CHACHA_S390 if S390
97	help
98	  WireGuard is a secure, fast, and easy to use replacement for IPSec
99	  that uses modern cryptography and clever networking tricks. It's
100	  designed to be fairly general purpose and abstract enough to fit most
101	  use cases, while at the same time remaining extremely simple to
102	  configure. See www.wireguard.com for more info.
103
104	  It's safe to say Y or M here, as the driver is very lightweight and
105	  is only in use when an administrator chooses to add an interface.
106
107config WIREGUARD_DEBUG
108	bool "Debugging checks and verbose messages"
109	depends on WIREGUARD
110	help
111	  This will write log messages for handshake and other events
112	  that occur for a WireGuard interface. It will also perform some
113	  extra validation checks and unit tests at various points. This is
114	  only useful for debugging.
115
116	  Say N here unless you know what you're doing.
117
118config OVPN
119	tristate "OpenVPN data channel offload"
120	depends on NET && INET
121	depends on IPV6 || !IPV6
122	select DST_CACHE
123	select NET_UDP_TUNNEL
124	select CRYPTO
125	select CRYPTO_AES
126	select CRYPTO_GCM
127	select CRYPTO_CHACHA20POLY1305
128	help
129	  This module enhances the performance of the OpenVPN userspace software
130	  by offloading the data channel processing to kernelspace.
131
132config EQUALIZER
133	tristate "EQL (serial line load balancing) support"
134	help
135	  If you have two serial connections to some other computer (this
136	  usually requires two modems and two telephone lines) and you use
137	  SLIP (the protocol for sending Internet traffic over telephone
138	  lines) or PPP (a better SLIP) on them, you can make them behave like
139	  one double speed connection using this driver.  Naturally, this has
140	  to be supported at the other end as well, either with a similar EQL
141	  Linux driver or with a Livingston Portmaster 2e.
142
143	  Say Y if you want this and read
144	  <file:Documentation/networking/eql.rst>.  You may also want to read
145	  section 6.2 of the NET-3-HOWTO, available from
146	  <http://www.tldp.org/docs.html#howto>.
147
148	  To compile this driver as a module, choose M here: the module
149	  will be called eql.  If unsure, say N.
150
151config NET_FC
152	bool "Fibre Channel driver support"
153	depends on SCSI && PCI
154	help
155	  Fibre Channel is a high speed serial protocol mainly used to connect
156	  large storage devices to the computer; it is compatible with and
157	  intended to replace SCSI.
158
159	  If you intend to use Fibre Channel, you need to have a Fibre channel
160	  adaptor card in your computer; say Y here and to the driver for your
161	  adaptor below. You also should have said Y to "SCSI support" and
162	  "SCSI generic support".
163
164config IFB
165	tristate "Intermediate Functional Block support"
166	depends on NET_ACT_MIRRED || NFT_FWD_NETDEV
167	select NET_REDIRECT
168	help
169	  This is an intermediate driver that allows sharing of
170	  resources.
171	  To compile this driver as a module, choose M here: the module
172	  will be called ifb.  If you want to use more than one ifb
173	  device at a time, you need to compile this driver as a module.
174	  Instead of 'ifb', the devices will then be called 'ifb0',
175	  'ifb1' etc.
176	  Look at the iproute2 documentation directory for usage etc
177
178source "drivers/net/team/Kconfig"
179
180config MACVLAN
181	tristate "MAC-VLAN support"
182	help
183	  This allows one to create virtual interfaces that map packets to
184	  or from specific MAC addresses to a particular interface.
185
186	  Macvlan devices can be added using the "ip" command from the
187	  iproute2 package starting with the iproute2-2.6.23 release:
188
189	  "ip link add link <real dev> [ address MAC ] [ NAME ] type macvlan"
190
191	  To compile this driver as a module, choose M here: the module
192	  will be called macvlan.
193
194config MACVTAP
195	tristate "MAC-VLAN based tap driver"
196	depends on MACVLAN
197	depends on INET
198	select TAP
199	help
200	  This adds a specialized tap character device driver that is based
201	  on the MAC-VLAN network interface, called macvtap. A macvtap device
202	  can be added in the same way as a macvlan device, using 'type
203	  macvtap', and then be accessed through the tap user space interface.
204
205	  To compile this driver as a module, choose M here: the module
206	  will be called macvtap.
207
208config IPVLAN_L3S
209	depends on NETFILTER
210	depends on IPVLAN
211	def_bool y
212	select NET_L3_MASTER_DEV
213
214config IPVLAN
215	tristate "IP-VLAN support"
216	depends on INET
217	depends on IPV6 || !IPV6
218	help
219	  This allows one to create virtual devices off of a main interface
220	  and packets will be delivered based on the dest L3 (IPv6/IPv4 addr)
221	  on packets. All interfaces (including the main interface) share L2
222	  making it transparent to the connected L2 switch.
223
224	  Ipvlan devices can be added using the "ip" command from the
225	  iproute2 package starting with the iproute2-3.19 release:
226
227	  "ip link add link <main-dev> [ NAME ] type ipvlan"
228
229	  To compile this driver as a module, choose M here: the module
230	  will be called ipvlan.
231
232config IPVTAP
233	tristate "IP-VLAN based tap driver"
234	depends on IPVLAN
235	depends on INET
236	select TAP
237	help
238	  This adds a specialized tap character device driver that is based
239	  on the IP-VLAN network interface, called ipvtap. An ipvtap device
240	  can be added in the same way as a ipvlan device, using 'type
241	  ipvtap', and then be accessed through the tap user space interface.
242
243	  To compile this driver as a module, choose M here: the module
244	  will be called ipvtap.
245
246config VXLAN
247	tristate "Virtual eXtensible Local Area Network (VXLAN)"
248	depends on INET
249	select NET_UDP_TUNNEL
250	select GRO_CELLS
251	help
252	  This allows one to create vxlan virtual interfaces that provide
253	  Layer 2 Networks over Layer 3 Networks. VXLAN is often used
254	  to tunnel virtual network infrastructure in virtualized environments.
255	  For more information see:
256	    http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-02
257
258	  To compile this driver as a module, choose M here: the module
259	  will be called vxlan.
260
261config GENEVE
262	tristate "Generic Network Virtualization Encapsulation"
263	depends on INET
264	depends on IPV6 || !IPV6
265	select NET_UDP_TUNNEL
266	select GRO_CELLS
267	help
268	  This allows one to create geneve virtual interfaces that provide
269	  Layer 2 Networks over Layer 3 Networks. GENEVE is often used
270	  to tunnel virtual network infrastructure in virtualized environments.
271	  For more information see:
272	    http://tools.ietf.org/html/draft-gross-geneve-02
273
274	  To compile this driver as a module, choose M here: the module
275	  will be called geneve.
276
277config BAREUDP
278	tristate "Bare UDP Encapsulation"
279	depends on INET
280	depends on IPV6 || !IPV6
281	select NET_UDP_TUNNEL
282	select GRO_CELLS
283	help
284	  This adds a bare UDP tunnel module for tunnelling different
285	  kinds of traffic like MPLS, IP, etc. inside a UDP tunnel.
286
287	  To compile this driver as a module, choose M here: the module
288	  will be called bareudp.
289
290config GTP
291	tristate "GPRS Tunneling Protocol datapath (GTP-U)"
292	depends on INET
293	select NET_UDP_TUNNEL
294	help
295	  This allows one to create gtp virtual interfaces that provide
296	  the GPRS Tunneling Protocol datapath (GTP-U). This tunneling protocol
297	  is used to prevent subscribers from accessing mobile carrier core
298	  network infrastructure. This driver requires a userspace software that
299	  implements the signaling protocol (GTP-C) to update its PDP context
300	  base, such as OpenGGSN <http://git.osmocom.org/openggsn/). This
301	  tunneling protocol is implemented according to the GSM TS 09.60 and
302	  3GPP TS 29.060 standards.
303
304	  To compile this drivers as a module, choose M here: the module
305	  will be called gtp.
306
307config PFCP
308	tristate "Packet Forwarding Control Protocol (PFCP)"
309	depends on INET
310	select NET_UDP_TUNNEL
311	help
312	  This allows one to create PFCP virtual interfaces that allows to
313	  set up software and hardware offload of PFCP packets.
314	  Note that this module does not support PFCP protocol in the kernel space.
315	  There is no support for parsing any PFCP messages.
316
317	  To compile this drivers as a module, choose M here: the module
318	  will be called pfcp.
319
320config AMT
321	tristate "Automatic Multicast Tunneling (AMT)"
322	depends on INET && IP_MULTICAST
323	depends on IPV6 || !IPV6
324	select NET_UDP_TUNNEL
325	help
326	  This allows one to create AMT(Automatic Multicast Tunneling)
327	  virtual interfaces that provide multicast tunneling.
328	  There are two roles, Gateway, and Relay.
329	  Gateway Encapsulates IGMP/MLD traffic from listeners to the Relay.
330	  Gateway Decapsulates multicast traffic from the Relay to Listeners.
331	  Relay Encapsulates multicast traffic from Sources to Gateway.
332	  Relay Decapsulates IGMP/MLD traffic from Gateway.
333
334	  To compile this drivers as a module, choose M here: the module
335	  will be called amt.
336
337config MACSEC
338	tristate "IEEE 802.1AE MAC-level encryption (MACsec)"
339	select CRYPTO
340	select CRYPTO_AES
341	select CRYPTO_GCM
342	select GRO_CELLS
343	help
344	   MACsec is an encryption standard for Ethernet.
345
346config NETCONSOLE
347	tristate "Network console logging support"
348	help
349	  If you want to log kernel messages over the network, enable this.
350	  See <file:Documentation/networking/netconsole.rst> for details.
351
352config NETCONSOLE_DYNAMIC
353	bool "Dynamic reconfiguration of logging targets"
354	depends on NETCONSOLE && SYSFS && CONFIGFS_FS && \
355			!(NETCONSOLE=y && CONFIGFS_FS=m)
356	help
357	  This option enables the ability to dynamically reconfigure target
358	  parameters (interface, IP addresses, port numbers, MAC addresses)
359	  at runtime through a userspace interface exported using configfs.
360	  See <file:Documentation/networking/netconsole.rst> for details.
361
362config NETCONSOLE_EXTENDED_LOG
363	bool "Set kernel extended message by default"
364	depends on NETCONSOLE
365	default n
366	help
367	  Set extended log support for netconsole message. If this option is
368	  set, log messages are transmitted with extended metadata header in a
369	  format similar to /dev/kmsg.  See
370	  <file:Documentation/networking/netconsole.rst> for details.
371
372config NETCONSOLE_PREPEND_RELEASE
373	bool "Prepend kernel release version in the message by default"
374	depends on NETCONSOLE_EXTENDED_LOG
375	default n
376	help
377	  Set kernel release to be prepended to each netconsole message by
378	  default. If this option is set, the kernel release is prepended into
379	  the first field of every netconsole message, so, the netconsole
380	  server/peer can easily identify what kernel release is logging each
381	  message.  See <file:Documentation/networking/netconsole.rst> for
382	  details.
383
384config NETPOLL
385	def_bool NETCONSOLE
386
387config NET_POLL_CONTROLLER
388	def_bool NETPOLL
389
390config NTB_NETDEV
391	tristate "Virtual Ethernet over NTB Transport"
392	depends on NTB_TRANSPORT
393
394config RIONET
395	tristate "RapidIO Ethernet over messaging driver support"
396	depends on RAPIDIO
397
398config RIONET_TX_SIZE
399	int "Number of outbound queue entries"
400	depends on RIONET
401	default "128"
402
403config RIONET_RX_SIZE
404	int "Number of inbound queue entries"
405	depends on RIONET
406	default "128"
407
408config TUN
409	tristate "Universal TUN/TAP device driver support"
410	depends on INET
411	select CRC32
412	help
413	  TUN/TAP provides packet reception and transmission for user space
414	  programs.  It can be viewed as a simple Point-to-Point or Ethernet
415	  device, which instead of receiving packets from a physical media,
416	  receives them from user space program and instead of sending packets
417	  via physical media writes them to the user space program.
418
419	  When a program opens /dev/net/tun, driver creates and registers
420	  corresponding net device tunX or tapX.  After a program closed above
421	  devices, driver will automatically delete tunXX or tapXX device and
422	  all routes corresponding to it.
423
424	  Please read <file:Documentation/networking/tuntap.rst> for more
425	  information.
426
427	  To compile this driver as a module, choose M here: the module
428	  will be called tun.
429
430	  If you don't know what to use this for, you don't need it.
431
432config TAP
433	tristate
434	help
435	  This option is selected by any driver implementing tap user space
436	  interface for a virtual interface to re-use core tap functionality.
437
438config TUN_VNET_CROSS_LE
439	bool "Support for cross-endian vnet headers on little-endian kernels"
440	default n
441	help
442	  This option allows TUN/TAP and MACVTAP device drivers in a
443	  little-endian kernel to parse vnet headers that come from a
444	  big-endian legacy virtio device.
445
446	  Userspace programs can control the feature using the TUNSETVNETBE
447	  and TUNGETVNETBE ioctls.
448
449	  Unless you have a little-endian system hosting a big-endian virtual
450	  machine with a legacy virtio NIC, you should say N.
451
452config VETH
453	tristate "Virtual ethernet pair device"
454	select PAGE_POOL
455	help
456	  This device is a local ethernet tunnel. Devices are created in pairs.
457	  When one end receives the packet it appears on its pair and vice
458	  versa.
459
460config VIRTIO_NET
461	tristate "Virtio network driver"
462	depends on VIRTIO
463	select NET_FAILOVER
464	select DIMLIB
465	help
466	  This is the virtual network driver for virtio.  It can be used with
467	  QEMU based VMMs (like KVM or Xen).  Say Y or M.
468
469config NLMON
470	tristate "Virtual netlink monitoring device"
471	help
472	  This option enables a monitoring net device for netlink skbs. The
473	  purpose of this is to analyze netlink messages with packet sockets.
474	  Thus applications like tcpdump will be able to see local netlink
475	  messages if they tap into the netlink device, record pcaps for further
476	  diagnostics, etc. This is mostly intended for developers or support
477	  to debug netlink issues. If unsure, say N.
478
479config NETKIT
480	bool "BPF-programmable network device"
481	depends on BPF_SYSCALL
482	help
483	  The netkit device is a virtual networking device where BPF programs
484	  can be attached to the device(s) transmission routine in order to
485	  implement the driver's internal logic. The device can be configured
486	  to operate in L3 or L2 mode. If unsure, say N.
487
488config NET_VRF
489	tristate "Virtual Routing and Forwarding (Lite)"
490	depends on IP_MULTIPLE_TABLES
491	depends on NET_L3_MASTER_DEV
492	depends on IPV6 || IPV6=n
493	depends on IPV6_MULTIPLE_TABLES || IPV6=n
494	help
495	  This option enables the support for mapping interfaces into VRF's. The
496	  support enables VRF devices.
497
498config VSOCKMON
499	tristate "Virtual vsock monitoring device"
500	depends on VHOST_VSOCK
501	help
502	  This option enables a monitoring net device for vsock sockets. It is
503	  mostly intended for developers or support to debug vsock issues. If
504	  unsure, say N.
505
506config MHI_NET
507	tristate "MHI network driver"
508	depends on MHI_BUS
509	help
510	  This is the network driver for MHI bus.  It can be used with
511	  QCOM based WWAN modems for IP or QMAP/rmnet protocol (like SDX55).
512	  Say Y or M.
513
514endif # NET_CORE
515
516config SUNGEM_PHY
517	tristate
518
519source "drivers/net/arcnet/Kconfig"
520
521source "drivers/atm/Kconfig"
522
523source "drivers/net/caif/Kconfig"
524
525source "drivers/net/dsa/Kconfig"
526
527source "drivers/net/ethernet/Kconfig"
528
529source "drivers/net/fddi/Kconfig"
530
531source "drivers/net/hippi/Kconfig"
532
533source "drivers/net/ipa/Kconfig"
534
535source "drivers/net/phy/Kconfig"
536
537source "drivers/net/pse-pd/Kconfig"
538
539source "drivers/net/can/Kconfig"
540
541source "drivers/net/mctp/Kconfig"
542
543source "drivers/net/mdio/Kconfig"
544
545source "drivers/net/pcs/Kconfig"
546
547source "drivers/net/plip/Kconfig"
548
549source "drivers/net/ppp/Kconfig"
550
551source "drivers/net/slip/Kconfig"
552
553source "drivers/s390/net/Kconfig"
554
555source "drivers/net/usb/Kconfig"
556
557source "drivers/net/wireless/Kconfig"
558
559source "drivers/net/wan/Kconfig"
560
561source "drivers/net/ieee802154/Kconfig"
562
563source "drivers/net/wwan/Kconfig"
564
565config XEN_NETDEV_FRONTEND
566	tristate "Xen network device frontend driver"
567	depends on XEN
568	select XEN_XENBUS_FRONTEND
569	select PAGE_POOL
570	default y
571	help
572	  This driver provides support for Xen paravirtual network
573	  devices exported by a Xen network driver domain (often
574	  domain 0).
575
576	  The corresponding Linux backend driver is enabled by the
577	  CONFIG_XEN_NETDEV_BACKEND option.
578
579	  If you are compiling a kernel for use as Xen guest, you
580	  should say Y here. To compile this driver as a module, chose
581	  M here: the module will be called xen-netfront.
582
583config XEN_NETDEV_BACKEND
584	tristate "Xen backend network device"
585	depends on XEN_BACKEND
586	help
587	  This driver allows the kernel to act as a Xen network driver
588	  domain which exports paravirtual network devices to other
589	  Xen domains. These devices can be accessed by any operating
590	  system that implements a compatible front end.
591
592	  The corresponding Linux frontend driver is enabled by the
593	  CONFIG_XEN_NETDEV_FRONTEND configuration option.
594
595	  The backend driver presents a standard network device
596	  endpoint for each paravirtual network device to the driver
597	  domain network stack. These can then be bridged or routed
598	  etc in order to provide full network connectivity.
599
600	  If you are compiling a kernel to run in a Xen network driver
601	  domain (often this is domain 0) you should say Y here. To
602	  compile this driver as a module, chose M here: the module
603	  will be called xen-netback.
604
605config VMXNET3
606	tristate "VMware VMXNET3 ethernet driver"
607	depends on PCI && INET
608	depends on PAGE_SIZE_LESS_THAN_64KB
609	select PAGE_POOL
610	help
611	  This driver supports VMware's vmxnet3 virtual ethernet NIC.
612	  To compile this driver as a module, choose M here: the
613	  module will be called vmxnet3.
614
615config FUJITSU_ES
616	tristate "FUJITSU Extended Socket Network Device driver"
617	depends on ACPI
618	help
619	  This driver provides support for Extended Socket network device
620	  on Extended Partitioning of FUJITSU PRIMEQUEST 2000 E2 series.
621
622source "drivers/net/thunderbolt/Kconfig"
623source "drivers/net/hyperv/Kconfig"
624
625config NETDEVSIM
626	tristate "Simulated networking device"
627	depends on DEBUG_FS
628	depends on INET
629	depends on IPV6 || IPV6=n
630	depends on PSAMPLE || PSAMPLE=n
631	depends on PTP_1588_CLOCK_MOCK || PTP_1588_CLOCK_MOCK=n
632	select NET_DEVLINK
633	select PAGE_POOL
634	select NET_SHAPER
635	help
636	  This driver is a developer testing tool and software model that can
637	  be used to test various control path networking APIs, especially
638	  HW-offload related.
639
640	  To compile this driver as a module, choose M here: the module
641	  will be called netdevsim.
642
643config NET_FAILOVER
644	tristate "Failover driver"
645	select FAILOVER
646	help
647	  This provides an automated failover mechanism via APIs to create
648	  and destroy a failover master netdev and manages a primary and
649	  standby slave netdevs that get registered via the generic failover
650	  infrastructure. This can be used by paravirtual drivers to enable
651	  an alternate low latency datapath. It also enables live migration of
652	  a VM with direct attached VF by failing over to the paravirtual
653	  datapath when the VF is unplugged.
654
655config NETDEV_LEGACY_INIT
656	bool
657	depends on ISA
658	help
659	  Drivers that call netdev_boot_setup_check() should select this
660	  symbol, everything else no longer needs it.
661
662endif # NETDEVICES
663