11da177e4SLinus Torvalds# 21da177e4SLinus Torvalds# Traffic control configuration. 31da177e4SLinus Torvalds# 46a2e9b73SSam Ravnborg 585ef3e5cSRandy Dunlapmenuconfig NET_SCHED 66a2e9b73SSam Ravnborg bool "QoS and/or fair queueing" 73c62f75aSDavid Kimdon select NET_SCH_FIFO 86a2e9b73SSam Ravnborg ---help--- 96a2e9b73SSam Ravnborg When the kernel has several packets to send out over a network 106a2e9b73SSam Ravnborg device, it has to decide which ones to send first, which ones to 1152ab4ac2SThomas Graf delay, and which ones to drop. This is the job of the queueing 1252ab4ac2SThomas Graf disciplines, several different algorithms for how to do this 136a2e9b73SSam Ravnborg "fairly" have been proposed. 146a2e9b73SSam Ravnborg 156a2e9b73SSam Ravnborg If you say N here, you will get the standard packet scheduler, which 166a2e9b73SSam Ravnborg is a FIFO (first come, first served). If you say Y here, you will be 176a2e9b73SSam Ravnborg able to choose from among several alternative algorithms which can 186a2e9b73SSam Ravnborg then be attached to different network devices. This is useful for 196a2e9b73SSam Ravnborg example if some of your network devices are real time devices that 206a2e9b73SSam Ravnborg need a certain minimum data flow rate, or if you need to limit the 216a2e9b73SSam Ravnborg maximum data flow rate for traffic which matches specified criteria. 226a2e9b73SSam Ravnborg This code is considered to be experimental. 236a2e9b73SSam Ravnborg 246a2e9b73SSam Ravnborg To administer these schedulers, you'll need the user-level utilities 255d330cddSAndrew Shewmaker from the package iproute2+tc at 265d330cddSAndrew Shewmaker <https://www.kernel.org/pub/linux/utils/net/iproute2/>. That package 275d330cddSAndrew Shewmaker also contains some documentation; for more, check out 28c996d8b9SMichael Witten <http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2>. 296a2e9b73SSam Ravnborg 306a2e9b73SSam Ravnborg This Quality of Service (QoS) support will enable you to use 316a2e9b73SSam Ravnborg Differentiated Services (diffserv) and Resource Reservation Protocol 3252ab4ac2SThomas Graf (RSVP) on your Linux router if you also say Y to the corresponding 3352ab4ac2SThomas Graf classifiers below. Documentation and software is at 3452ab4ac2SThomas Graf <http://diffserv.sourceforge.net/>. 356a2e9b73SSam Ravnborg 366a2e9b73SSam Ravnborg If you say Y here and to "/proc file system" below, you will be able 376a2e9b73SSam Ravnborg to read status information about packet schedulers from the file 386a2e9b73SSam Ravnborg /proc/net/psched. 396a2e9b73SSam Ravnborg 406a2e9b73SSam Ravnborg The available schedulers are listed in the following questions; you 416a2e9b73SSam Ravnborg can say Y to as many as you like. If unsure, say N now. 426a2e9b73SSam Ravnborg 4305b8b0faSRoman Zippelif NET_SCHED 4405b8b0faSRoman Zippel 4552ab4ac2SThomas Grafcomment "Queueing/Scheduling" 4652ab4ac2SThomas Graf 471da177e4SLinus Torvaldsconfig NET_SCH_CBQ 4852ab4ac2SThomas Graf tristate "Class Based Queueing (CBQ)" 491da177e4SLinus Torvalds ---help--- 501da177e4SLinus Torvalds Say Y here if you want to use the Class-Based Queueing (CBQ) packet 5152ab4ac2SThomas Graf scheduling algorithm. This algorithm classifies the waiting packets 5252ab4ac2SThomas Graf into a tree-like hierarchy of classes; the leaves of this tree are 5352ab4ac2SThomas Graf in turn scheduled by separate algorithms. 541da177e4SLinus Torvalds 5552ab4ac2SThomas Graf See the top of <file:net/sched/sch_cbq.c> for more details. 561da177e4SLinus Torvalds 571da177e4SLinus Torvalds CBQ is a commonly used scheduler, so if you're unsure, you should 581da177e4SLinus Torvalds say Y here. Then say Y to all the queueing algorithms below that you 5952ab4ac2SThomas Graf want to use as leaf disciplines. 601da177e4SLinus Torvalds 611da177e4SLinus Torvalds To compile this code as a module, choose M here: the 621da177e4SLinus Torvalds module will be called sch_cbq. 631da177e4SLinus Torvalds 641da177e4SLinus Torvaldsconfig NET_SCH_HTB 6552ab4ac2SThomas Graf tristate "Hierarchical Token Bucket (HTB)" 661da177e4SLinus Torvalds ---help--- 671da177e4SLinus Torvalds Say Y here if you want to use the Hierarchical Token Buckets (HTB) 6852ab4ac2SThomas Graf packet scheduling algorithm. See 691da177e4SLinus Torvalds <http://luxik.cdi.cz/~devik/qos/htb/> for complete manual and 701da177e4SLinus Torvalds in-depth articles. 711da177e4SLinus Torvalds 7252ab4ac2SThomas Graf HTB is very similar to CBQ regarding its goals however is has 731da177e4SLinus Torvalds different properties and different algorithm. 741da177e4SLinus Torvalds 751da177e4SLinus Torvalds To compile this code as a module, choose M here: the 761da177e4SLinus Torvalds module will be called sch_htb. 771da177e4SLinus Torvalds 781da177e4SLinus Torvaldsconfig NET_SCH_HFSC 7952ab4ac2SThomas Graf tristate "Hierarchical Fair Service Curve (HFSC)" 801da177e4SLinus Torvalds ---help--- 811da177e4SLinus Torvalds Say Y here if you want to use the Hierarchical Fair Service Curve 8252ab4ac2SThomas Graf (HFSC) packet scheduling algorithm. 831da177e4SLinus Torvalds 841da177e4SLinus Torvalds To compile this code as a module, choose M here: the 851da177e4SLinus Torvalds module will be called sch_hfsc. 861da177e4SLinus Torvalds 871da177e4SLinus Torvaldsconfig NET_SCH_ATM 8852ab4ac2SThomas Graf tristate "ATM Virtual Circuits (ATM)" 8905b8b0faSRoman Zippel depends on ATM 901da177e4SLinus Torvalds ---help--- 911da177e4SLinus Torvalds Say Y here if you want to use the ATM pseudo-scheduler. This 9252ab4ac2SThomas Graf provides a framework for invoking classifiers, which in turn 9352ab4ac2SThomas Graf select classes of this queuing discipline. Each class maps 9452ab4ac2SThomas Graf the flow(s) it is handling to a given virtual circuit. 9552ab4ac2SThomas Graf 9699acaeb9SGabriel Craciunescu See the top of <file:net/sched/sch_atm.c> for more details. 971da177e4SLinus Torvalds 981da177e4SLinus Torvalds To compile this code as a module, choose M here: the 991da177e4SLinus Torvalds module will be called sch_atm. 1001da177e4SLinus Torvalds 1011da177e4SLinus Torvaldsconfig NET_SCH_PRIO 10252ab4ac2SThomas Graf tristate "Multi Band Priority Queueing (PRIO)" 10352ab4ac2SThomas Graf ---help--- 1041da177e4SLinus Torvalds Say Y here if you want to use an n-band priority queue packet 10552ab4ac2SThomas Graf scheduler. 1061da177e4SLinus Torvalds 1071da177e4SLinus Torvalds To compile this code as a module, choose M here: the 1081da177e4SLinus Torvalds module will be called sch_prio. 1091da177e4SLinus Torvalds 11092651940SAlexander Duyckconfig NET_SCH_MULTIQ 11192651940SAlexander Duyck tristate "Hardware Multiqueue-aware Multi Band Queuing (MULTIQ)" 11292651940SAlexander Duyck ---help--- 11392651940SAlexander Duyck Say Y here if you want to use an n-band queue packet scheduler 11492651940SAlexander Duyck to support devices that have multiple hardware transmit queues. 11592651940SAlexander Duyck 11692651940SAlexander Duyck To compile this code as a module, choose M here: the 11792651940SAlexander Duyck module will be called sch_multiq. 11892651940SAlexander Duyck 1191da177e4SLinus Torvaldsconfig NET_SCH_RED 12052ab4ac2SThomas Graf tristate "Random Early Detection (RED)" 12152ab4ac2SThomas Graf ---help--- 1221da177e4SLinus Torvalds Say Y here if you want to use the Random Early Detection (RED) 12352ab4ac2SThomas Graf packet scheduling algorithm. 12452ab4ac2SThomas Graf 12552ab4ac2SThomas Graf See the top of <file:net/sched/sch_red.c> for more details. 1261da177e4SLinus Torvalds 1271da177e4SLinus Torvalds To compile this code as a module, choose M here: the 1281da177e4SLinus Torvalds module will be called sch_red. 1291da177e4SLinus Torvalds 130e13e02a3SEric Dumazetconfig NET_SCH_SFB 131e13e02a3SEric Dumazet tristate "Stochastic Fair Blue (SFB)" 132e13e02a3SEric Dumazet ---help--- 133e13e02a3SEric Dumazet Say Y here if you want to use the Stochastic Fair Blue (SFB) 134e13e02a3SEric Dumazet packet scheduling algorithm. 135e13e02a3SEric Dumazet 136e13e02a3SEric Dumazet See the top of <file:net/sched/sch_sfb.c> for more details. 137e13e02a3SEric Dumazet 138e13e02a3SEric Dumazet To compile this code as a module, choose M here: the 139e13e02a3SEric Dumazet module will be called sch_sfb. 140e13e02a3SEric Dumazet 1411da177e4SLinus Torvaldsconfig NET_SCH_SFQ 14252ab4ac2SThomas Graf tristate "Stochastic Fairness Queueing (SFQ)" 1431da177e4SLinus Torvalds ---help--- 1441da177e4SLinus Torvalds Say Y here if you want to use the Stochastic Fairness Queueing (SFQ) 14552ab4ac2SThomas Graf packet scheduling algorithm. 14652ab4ac2SThomas Graf 14752ab4ac2SThomas Graf See the top of <file:net/sched/sch_sfq.c> for more details. 1481da177e4SLinus Torvalds 1491da177e4SLinus Torvalds To compile this code as a module, choose M here: the 1501da177e4SLinus Torvalds module will be called sch_sfq. 1511da177e4SLinus Torvalds 1521da177e4SLinus Torvaldsconfig NET_SCH_TEQL 15352ab4ac2SThomas Graf tristate "True Link Equalizer (TEQL)" 1541da177e4SLinus Torvalds ---help--- 1551da177e4SLinus Torvalds Say Y here if you want to use the True Link Equalizer (TLE) packet 15652ab4ac2SThomas Graf scheduling algorithm. This queueing discipline allows the combination 15752ab4ac2SThomas Graf of several physical devices into one virtual device. 15852ab4ac2SThomas Graf 15952ab4ac2SThomas Graf See the top of <file:net/sched/sch_teql.c> for more details. 1601da177e4SLinus Torvalds 1611da177e4SLinus Torvalds To compile this code as a module, choose M here: the 1621da177e4SLinus Torvalds module will be called sch_teql. 1631da177e4SLinus Torvalds 1641da177e4SLinus Torvaldsconfig NET_SCH_TBF 16552ab4ac2SThomas Graf tristate "Token Bucket Filter (TBF)" 16652ab4ac2SThomas Graf ---help--- 16752ab4ac2SThomas Graf Say Y here if you want to use the Token Bucket Filter (TBF) packet 16852ab4ac2SThomas Graf scheduling algorithm. 16952ab4ac2SThomas Graf 17052ab4ac2SThomas Graf See the top of <file:net/sched/sch_tbf.c> for more details. 1711da177e4SLinus Torvalds 1721da177e4SLinus Torvalds To compile this code as a module, choose M here: the 1731da177e4SLinus Torvalds module will be called sch_tbf. 1741da177e4SLinus Torvalds 175585d763aSVinicius Costa Gomesconfig NET_SCH_CBS 176585d763aSVinicius Costa Gomes tristate "Credit Based Shaper (CBS)" 177585d763aSVinicius Costa Gomes ---help--- 178585d763aSVinicius Costa Gomes Say Y here if you want to use the Credit Based Shaper (CBS) packet 179585d763aSVinicius Costa Gomes scheduling algorithm. 180585d763aSVinicius Costa Gomes 181585d763aSVinicius Costa Gomes See the top of <file:net/sched/sch_cbs.c> for more details. 182585d763aSVinicius Costa Gomes 183585d763aSVinicius Costa Gomes To compile this code as a module, choose M here: the 184585d763aSVinicius Costa Gomes module will be called sch_cbs. 185585d763aSVinicius Costa Gomes 18625db26a9SVinicius Costa Gomesconfig NET_SCH_ETF 18725db26a9SVinicius Costa Gomes tristate "Earliest TxTime First (ETF)" 18825db26a9SVinicius Costa Gomes help 18925db26a9SVinicius Costa Gomes Say Y here if you want to use the Earliest TxTime First (ETF) packet 19025db26a9SVinicius Costa Gomes scheduling algorithm. 19125db26a9SVinicius Costa Gomes 19225db26a9SVinicius Costa Gomes See the top of <file:net/sched/sch_etf.c> for more details. 19325db26a9SVinicius Costa Gomes 19425db26a9SVinicius Costa Gomes To compile this code as a module, choose M here: the 19525db26a9SVinicius Costa Gomes module will be called sch_etf. 19625db26a9SVinicius Costa Gomes 1971da177e4SLinus Torvaldsconfig NET_SCH_GRED 19852ab4ac2SThomas Graf tristate "Generic Random Early Detection (GRED)" 19952ab4ac2SThomas Graf ---help--- 2001da177e4SLinus Torvalds Say Y here if you want to use the Generic Random Early Detection 20120cc6befSLucas Correia Villa Real (GRED) packet scheduling algorithm for some of your network devices 2021da177e4SLinus Torvalds (see the top of <file:net/sched/sch_red.c> for details and 2031da177e4SLinus Torvalds references about the algorithm). 2041da177e4SLinus Torvalds 2051da177e4SLinus Torvalds To compile this code as a module, choose M here: the 2061da177e4SLinus Torvalds module will be called sch_gred. 2071da177e4SLinus Torvalds 2081da177e4SLinus Torvaldsconfig NET_SCH_DSMARK 20952ab4ac2SThomas Graf tristate "Differentiated Services marker (DSMARK)" 21052ab4ac2SThomas Graf ---help--- 2111da177e4SLinus Torvalds Say Y if you want to schedule packets according to the 2121da177e4SLinus Torvalds Differentiated Services architecture proposed in RFC 2475. 2131da177e4SLinus Torvalds Technical information on this method, with pointers to associated 2141da177e4SLinus Torvalds RFCs, is available at <http://www.gta.ufrj.br/diffserv/>. 2151da177e4SLinus Torvalds 2161da177e4SLinus Torvalds To compile this code as a module, choose M here: the 2171da177e4SLinus Torvalds module will be called sch_dsmark. 2181da177e4SLinus Torvalds 2191da177e4SLinus Torvaldsconfig NET_SCH_NETEM 22052ab4ac2SThomas Graf tristate "Network emulator (NETEM)" 22152ab4ac2SThomas Graf ---help--- 2221da177e4SLinus Torvalds Say Y if you want to emulate network delay, loss, and packet 2231da177e4SLinus Torvalds re-ordering. This is often useful to simulate networks when 2241da177e4SLinus Torvalds testing applications or protocols. 2251da177e4SLinus Torvalds 2261da177e4SLinus Torvalds To compile this driver as a module, choose M here: the module 2271da177e4SLinus Torvalds will be called sch_netem. 2281da177e4SLinus Torvalds 2291da177e4SLinus Torvalds If unsure, say N. 2301da177e4SLinus Torvalds 23113d2a1d2SPatrick McHardyconfig NET_SCH_DRR 23213d2a1d2SPatrick McHardy tristate "Deficit Round Robin scheduler (DRR)" 23313d2a1d2SPatrick McHardy help 23413d2a1d2SPatrick McHardy Say Y here if you want to use the Deficit Round Robin (DRR) packet 23513d2a1d2SPatrick McHardy scheduling algorithm. 23613d2a1d2SPatrick McHardy 23713d2a1d2SPatrick McHardy To compile this driver as a module, choose M here: the module 23813d2a1d2SPatrick McHardy will be called sch_drr. 23913d2a1d2SPatrick McHardy 24013d2a1d2SPatrick McHardy If unsure, say N. 24113d2a1d2SPatrick McHardy 242b8970f0bSJohn Fastabendconfig NET_SCH_MQPRIO 243b8970f0bSJohn Fastabend tristate "Multi-queue priority scheduler (MQPRIO)" 244b8970f0bSJohn Fastabend help 245b8970f0bSJohn Fastabend Say Y here if you want to use the Multi-queue Priority scheduler. 246b8970f0bSJohn Fastabend This scheduler allows QOS to be offloaded on NICs that have support 247b8970f0bSJohn Fastabend for offloading QOS schedulers. 248b8970f0bSJohn Fastabend 249b8970f0bSJohn Fastabend To compile this driver as a module, choose M here: the module will 250b8970f0bSJohn Fastabend be called sch_mqprio. 251b8970f0bSJohn Fastabend 252b8970f0bSJohn Fastabend If unsure, say N. 253b8970f0bSJohn Fastabend 25445e14433Sstephen hemmingerconfig NET_SCH_CHOKE 25545e14433Sstephen hemminger tristate "CHOose and Keep responsive flow scheduler (CHOKE)" 25645e14433Sstephen hemminger help 25745e14433Sstephen hemminger Say Y here if you want to use the CHOKe packet scheduler (CHOose 25845e14433Sstephen hemminger and Keep for responsive flows, CHOose and Kill for unresponsive 25945e14433Sstephen hemminger flows). This is a variation of RED which trys to penalize flows 26045e14433Sstephen hemminger that monopolize the queue. 26145e14433Sstephen hemminger 26245e14433Sstephen hemminger To compile this code as a module, choose M here: the 26345e14433Sstephen hemminger module will be called sch_choke. 26445e14433Sstephen hemminger 2650545a303Sstephen hemmingerconfig NET_SCH_QFQ 2660545a303Sstephen hemminger tristate "Quick Fair Queueing scheduler (QFQ)" 2670545a303Sstephen hemminger help 2680545a303Sstephen hemminger Say Y here if you want to use the Quick Fair Queueing Scheduler (QFQ) 2690545a303Sstephen hemminger packet scheduling algorithm. 2700545a303Sstephen hemminger 2710545a303Sstephen hemminger To compile this driver as a module, choose M here: the module 2720545a303Sstephen hemminger will be called sch_qfq. 2730545a303Sstephen hemminger 2740545a303Sstephen hemminger If unsure, say N. 2750545a303Sstephen hemminger 27676e3cc12SEric Dumazetconfig NET_SCH_CODEL 27776e3cc12SEric Dumazet tristate "Controlled Delay AQM (CODEL)" 27876e3cc12SEric Dumazet help 27976e3cc12SEric Dumazet Say Y here if you want to use the Controlled Delay (CODEL) 28076e3cc12SEric Dumazet packet scheduling algorithm. 28176e3cc12SEric Dumazet 28276e3cc12SEric Dumazet To compile this driver as a module, choose M here: the module 28376e3cc12SEric Dumazet will be called sch_codel. 28476e3cc12SEric Dumazet 28576e3cc12SEric Dumazet If unsure, say N. 28676e3cc12SEric Dumazet 2874b549a2eSEric Dumazetconfig NET_SCH_FQ_CODEL 2884b549a2eSEric Dumazet tristate "Fair Queue Controlled Delay AQM (FQ_CODEL)" 2894b549a2eSEric Dumazet help 2904b549a2eSEric Dumazet Say Y here if you want to use the FQ Controlled Delay (FQ_CODEL) 2914b549a2eSEric Dumazet packet scheduling algorithm. 2924b549a2eSEric Dumazet 2934b549a2eSEric Dumazet To compile this driver as a module, choose M here: the module 2944b549a2eSEric Dumazet will be called sch_fq_codel. 2954b549a2eSEric Dumazet 2964b549a2eSEric Dumazet If unsure, say N. 2974b549a2eSEric Dumazet 298*046f6fd5SToke Høiland-Jørgensenconfig NET_SCH_CAKE 299*046f6fd5SToke Høiland-Jørgensen tristate "Common Applications Kept Enhanced (CAKE)" 300*046f6fd5SToke Høiland-Jørgensen help 301*046f6fd5SToke Høiland-Jørgensen Say Y here if you want to use the Common Applications Kept Enhanced 302*046f6fd5SToke Høiland-Jørgensen (CAKE) queue management algorithm. 303*046f6fd5SToke Høiland-Jørgensen 304*046f6fd5SToke Høiland-Jørgensen To compile this driver as a module, choose M here: the module 305*046f6fd5SToke Høiland-Jørgensen will be called sch_cake. 306*046f6fd5SToke Høiland-Jørgensen 307*046f6fd5SToke Høiland-Jørgensen If unsure, say N. 308*046f6fd5SToke Høiland-Jørgensen 309afe4fd06SEric Dumazetconfig NET_SCH_FQ 310afe4fd06SEric Dumazet tristate "Fair Queue" 311afe4fd06SEric Dumazet help 312afe4fd06SEric Dumazet Say Y here if you want to use the FQ packet scheduling algorithm. 313afe4fd06SEric Dumazet 314afe4fd06SEric Dumazet FQ does flow separation, and is able to respect pacing requirements 315afe4fd06SEric Dumazet set by TCP stack into sk->sk_pacing_rate (for localy generated 316afe4fd06SEric Dumazet traffic) 317afe4fd06SEric Dumazet 318afe4fd06SEric Dumazet To compile this driver as a module, choose M here: the module 319afe4fd06SEric Dumazet will be called sch_fq. 320afe4fd06SEric Dumazet 321afe4fd06SEric Dumazet If unsure, say N. 322afe4fd06SEric Dumazet 32310239edfSTerry Lamconfig NET_SCH_HHF 32410239edfSTerry Lam tristate "Heavy-Hitter Filter (HHF)" 32510239edfSTerry Lam help 32610239edfSTerry Lam Say Y here if you want to use the Heavy-Hitter Filter (HHF) 32710239edfSTerry Lam packet scheduling algorithm. 32810239edfSTerry Lam 32910239edfSTerry Lam To compile this driver as a module, choose M here: the module 33010239edfSTerry Lam will be called sch_hhf. 33110239edfSTerry Lam 332d4b36210SVijay Subramanianconfig NET_SCH_PIE 333d4b36210SVijay Subramanian tristate "Proportional Integral controller Enhanced (PIE) scheduler" 334d4b36210SVijay Subramanian help 335d4b36210SVijay Subramanian Say Y here if you want to use the Proportional Integral controller 336d4b36210SVijay Subramanian Enhanced scheduler packet scheduling algorithm. 337d4b36210SVijay Subramanian For more information, please see 338d4b36210SVijay Subramanian http://tools.ietf.org/html/draft-pan-tsvwg-pie-00 339d4b36210SVijay Subramanian 340d4b36210SVijay Subramanian To compile this driver as a module, choose M here: the module 341d4b36210SVijay Subramanian will be called sch_pie. 342d4b36210SVijay Subramanian 343d4b36210SVijay Subramanian If unsure, say N. 344d4b36210SVijay Subramanian 3451da177e4SLinus Torvaldsconfig NET_SCH_INGRESS 3461f211a1bSDaniel Borkmann tristate "Ingress/classifier-action Qdisc" 34772eb7bd2SPatrick McHardy depends on NET_CLS_ACT 3481cf51900SPablo Neira select NET_INGRESS 3491f211a1bSDaniel Borkmann select NET_EGRESS 35052ab4ac2SThomas Graf ---help--- 3511f211a1bSDaniel Borkmann Say Y here if you want to use classifiers for incoming and/or outgoing 3521f211a1bSDaniel Borkmann packets. This qdisc doesn't do anything else besides running classifiers, 3531f211a1bSDaniel Borkmann which can also have actions attached to them. In case of outgoing packets, 3541f211a1bSDaniel Borkmann classifiers that this qdisc holds are executed in the transmit path 3551f211a1bSDaniel Borkmann before real enqueuing to an egress qdisc happens. 3561f211a1bSDaniel Borkmann 3571da177e4SLinus Torvalds If unsure, say Y. 3581da177e4SLinus Torvalds 3591f211a1bSDaniel Borkmann To compile this code as a module, choose M here: the module will be 3601f211a1bSDaniel Borkmann called sch_ingress with alias of sch_clsact. 3611da177e4SLinus Torvalds 362c3059be1SShriram Rajagopalanconfig NET_SCH_PLUG 363c3059be1SShriram Rajagopalan tristate "Plug network traffic until release (PLUG)" 364c3059be1SShriram Rajagopalan ---help--- 365c3059be1SShriram Rajagopalan 366c3059be1SShriram Rajagopalan This queuing discipline allows userspace to plug/unplug a network 367c3059be1SShriram Rajagopalan output queue, using the netlink interface. When it receives an 368c3059be1SShriram Rajagopalan enqueue command it inserts a plug into the outbound queue that 369c3059be1SShriram Rajagopalan causes following packets to enqueue until a dequeue command arrives 370c3059be1SShriram Rajagopalan over netlink, causing the plug to be removed and resuming the normal 371c3059be1SShriram Rajagopalan packet flow. 372c3059be1SShriram Rajagopalan 373c3059be1SShriram Rajagopalan This module also provides a generic "network output buffering" 374c3059be1SShriram Rajagopalan functionality (aka output commit), wherein upon arrival of a dequeue 375c3059be1SShriram Rajagopalan command, only packets up to the first plug are released for delivery. 376c3059be1SShriram Rajagopalan The Remus HA project uses this module to enable speculative execution 377c3059be1SShriram Rajagopalan of virtual machines by allowing the generated network output to be rolled 378c3059be1SShriram Rajagopalan back if needed. 379c3059be1SShriram Rajagopalan 3805d330cddSAndrew Shewmaker For more information, please refer to <http://wiki.xenproject.org/wiki/Remus> 381c3059be1SShriram Rajagopalan 382c3059be1SShriram Rajagopalan Say Y here if you are using this kernel for Xen dom0 and 383c3059be1SShriram Rajagopalan want to protect Xen guests with Remus. 384c3059be1SShriram Rajagopalan 385c3059be1SShriram Rajagopalan To compile this code as a module, choose M here: the 386c3059be1SShriram Rajagopalan module will be called sch_plug. 387c3059be1SShriram Rajagopalan 3888ea3e439Sstephen hemmingermenuconfig NET_SCH_DEFAULT 3898ea3e439Sstephen hemminger bool "Allow override default queue discipline" 3908ea3e439Sstephen hemminger ---help--- 3918ea3e439Sstephen hemminger Support for selection of default queuing discipline. 3928ea3e439Sstephen hemminger 3938ea3e439Sstephen hemminger Nearly all users can safely say no here, and the default 3948ea3e439Sstephen hemminger of pfifo_fast will be used. Many distributions already set 3958ea3e439Sstephen hemminger the default value via /proc/sys/net/core/default_qdisc. 3968ea3e439Sstephen hemminger 3978ea3e439Sstephen hemminger If unsure, say N. 3988ea3e439Sstephen hemminger 3998ea3e439Sstephen hemmingerif NET_SCH_DEFAULT 4008ea3e439Sstephen hemminger 4018ea3e439Sstephen hemmingerchoice 4028ea3e439Sstephen hemminger prompt "Default queuing discipline" 4038ea3e439Sstephen hemminger default DEFAULT_PFIFO_FAST 4048ea3e439Sstephen hemminger help 4058ea3e439Sstephen hemminger Select the queueing discipline that will be used by default 4068ea3e439Sstephen hemminger for all network devices. 4078ea3e439Sstephen hemminger 4088ea3e439Sstephen hemminger config DEFAULT_FQ 4098ea3e439Sstephen hemminger bool "Fair Queue" if NET_SCH_FQ 4108ea3e439Sstephen hemminger 4118ea3e439Sstephen hemminger config DEFAULT_CODEL 4128ea3e439Sstephen hemminger bool "Controlled Delay" if NET_SCH_CODEL 4138ea3e439Sstephen hemminger 4148ea3e439Sstephen hemminger config DEFAULT_FQ_CODEL 4158ea3e439Sstephen hemminger bool "Fair Queue Controlled Delay" if NET_SCH_FQ_CODEL 4168ea3e439Sstephen hemminger 4178ea3e439Sstephen hemminger config DEFAULT_SFQ 4188ea3e439Sstephen hemminger bool "Stochastic Fair Queue" if NET_SCH_SFQ 4198ea3e439Sstephen hemminger 4208ea3e439Sstephen hemminger config DEFAULT_PFIFO_FAST 4218ea3e439Sstephen hemminger bool "Priority FIFO Fast" 4228ea3e439Sstephen hemmingerendchoice 4238ea3e439Sstephen hemminger 4248ea3e439Sstephen hemmingerconfig DEFAULT_NET_SCH 4258ea3e439Sstephen hemminger string 4268ea3e439Sstephen hemminger default "pfifo_fast" if DEFAULT_PFIFO_FAST 4278ea3e439Sstephen hemminger default "fq" if DEFAULT_FQ 4288ea3e439Sstephen hemminger default "fq_codel" if DEFAULT_FQ_CODEL 4298ea3e439Sstephen hemminger default "sfq" if DEFAULT_SFQ 4308ea3e439Sstephen hemminger default "pfifo_fast" 4318ea3e439Sstephen hemmingerendif 4328ea3e439Sstephen hemminger 43352ab4ac2SThomas Grafcomment "Classification" 4341da177e4SLinus Torvalds 4351da177e4SLinus Torvaldsconfig NET_CLS 4366341e62bSChristoph Jaeger bool 4371da177e4SLinus Torvalds 4381da177e4SLinus Torvaldsconfig NET_CLS_BASIC 43952ab4ac2SThomas Graf tristate "Elementary classification (BASIC)" 44052ab4ac2SThomas Graf select NET_CLS 4411da177e4SLinus Torvalds ---help--- 4421da177e4SLinus Torvalds Say Y here if you want to be able to classify packets using 4431da177e4SLinus Torvalds only extended matches and actions. 4441da177e4SLinus Torvalds 4451da177e4SLinus Torvalds To compile this code as a module, choose M here: the 4461da177e4SLinus Torvalds module will be called cls_basic. 4471da177e4SLinus Torvalds 4481da177e4SLinus Torvaldsconfig NET_CLS_TCINDEX 44952ab4ac2SThomas Graf tristate "Traffic-Control Index (TCINDEX)" 45052ab4ac2SThomas Graf select NET_CLS 45152ab4ac2SThomas Graf ---help--- 45252ab4ac2SThomas Graf Say Y here if you want to be able to classify packets based on 45352ab4ac2SThomas Graf traffic control indices. You will want this feature if you want 45452ab4ac2SThomas Graf to implement Differentiated Services together with DSMARK. 4551da177e4SLinus Torvalds 4561da177e4SLinus Torvalds To compile this code as a module, choose M here: the 4571da177e4SLinus Torvalds module will be called cls_tcindex. 4581da177e4SLinus Torvalds 4591da177e4SLinus Torvaldsconfig NET_CLS_ROUTE4 46052ab4ac2SThomas Graf tristate "Routing decision (ROUTE)" 461034cfe48SRandy Dunlap depends on INET 462c7066f70SPatrick McHardy select IP_ROUTE_CLASSID 46352ab4ac2SThomas Graf select NET_CLS 46452ab4ac2SThomas Graf ---help--- 46552ab4ac2SThomas Graf If you say Y here, you will be able to classify packets 46652ab4ac2SThomas Graf according to the route table entry they matched. 4671da177e4SLinus Torvalds 4681da177e4SLinus Torvalds To compile this code as a module, choose M here: the 4691da177e4SLinus Torvalds module will be called cls_route. 4701da177e4SLinus Torvalds 4711da177e4SLinus Torvaldsconfig NET_CLS_FW 47252ab4ac2SThomas Graf tristate "Netfilter mark (FW)" 47352ab4ac2SThomas Graf select NET_CLS 47452ab4ac2SThomas Graf ---help--- 47552ab4ac2SThomas Graf If you say Y here, you will be able to classify packets 47652ab4ac2SThomas Graf according to netfilter/firewall marks. 4771da177e4SLinus Torvalds 4781da177e4SLinus Torvalds To compile this code as a module, choose M here: the 4791da177e4SLinus Torvalds module will be called cls_fw. 4801da177e4SLinus Torvalds 4811da177e4SLinus Torvaldsconfig NET_CLS_U32 48252ab4ac2SThomas Graf tristate "Universal 32bit comparisons w/ hashing (U32)" 48352ab4ac2SThomas Graf select NET_CLS 48452ab4ac2SThomas Graf ---help--- 4853539c272SMatt LaPlante Say Y here to be able to classify packets using a universal 48652ab4ac2SThomas Graf 32bit pieces based comparison scheme. 4871da177e4SLinus Torvalds 4881da177e4SLinus Torvalds To compile this code as a module, choose M here: the 4891da177e4SLinus Torvalds module will be called cls_u32. 4901da177e4SLinus Torvalds 4911da177e4SLinus Torvaldsconfig CLS_U32_PERF 49252ab4ac2SThomas Graf bool "Performance counters support" 4931da177e4SLinus Torvalds depends on NET_CLS_U32 49452ab4ac2SThomas Graf ---help--- 49552ab4ac2SThomas Graf Say Y here to make u32 gather additional statistics useful for 49652ab4ac2SThomas Graf fine tuning u32 classifiers. 4971da177e4SLinus Torvalds 4981da177e4SLinus Torvaldsconfig CLS_U32_MARK 49952ab4ac2SThomas Graf bool "Netfilter marks support" 50082e91ffeSThomas Graf depends on NET_CLS_U32 50152ab4ac2SThomas Graf ---help--- 50252ab4ac2SThomas Graf Say Y here to be able to use netfilter marks as u32 key. 5031da177e4SLinus Torvalds 5041da177e4SLinus Torvaldsconfig NET_CLS_RSVP 50552ab4ac2SThomas Graf tristate "IPv4 Resource Reservation Protocol (RSVP)" 50652ab4ac2SThomas Graf select NET_CLS 5071da177e4SLinus Torvalds ---help--- 5081da177e4SLinus Torvalds The Resource Reservation Protocol (RSVP) permits end systems to 5091da177e4SLinus Torvalds request a minimum and maximum data flow rate for a connection; this 5101da177e4SLinus Torvalds is important for real time data such as streaming sound or video. 5111da177e4SLinus Torvalds 5121da177e4SLinus Torvalds Say Y here if you want to be able to classify outgoing packets based 5131da177e4SLinus Torvalds on their RSVP requests. 5141da177e4SLinus Torvalds 5151da177e4SLinus Torvalds To compile this code as a module, choose M here: the 5161da177e4SLinus Torvalds module will be called cls_rsvp. 5171da177e4SLinus Torvalds 5181da177e4SLinus Torvaldsconfig NET_CLS_RSVP6 51952ab4ac2SThomas Graf tristate "IPv6 Resource Reservation Protocol (RSVP6)" 52052ab4ac2SThomas Graf select NET_CLS 5211da177e4SLinus Torvalds ---help--- 5221da177e4SLinus Torvalds The Resource Reservation Protocol (RSVP) permits end systems to 5231da177e4SLinus Torvalds request a minimum and maximum data flow rate for a connection; this 5241da177e4SLinus Torvalds is important for real time data such as streaming sound or video. 5251da177e4SLinus Torvalds 5261da177e4SLinus Torvalds Say Y here if you want to be able to classify outgoing packets based 52799acaeb9SGabriel Craciunescu on their RSVP requests and you are using the IPv6 protocol. 5281da177e4SLinus Torvalds 5291da177e4SLinus Torvalds To compile this code as a module, choose M here: the 5301da177e4SLinus Torvalds module will be called cls_rsvp6. 5311da177e4SLinus Torvalds 532e5dfb815SPatrick McHardyconfig NET_CLS_FLOW 533e5dfb815SPatrick McHardy tristate "Flow classifier" 534e5dfb815SPatrick McHardy select NET_CLS 535e5dfb815SPatrick McHardy ---help--- 536e5dfb815SPatrick McHardy If you say Y here, you will be able to classify packets based on 537e5dfb815SPatrick McHardy a configurable combination of packet keys. This is mostly useful 538e5dfb815SPatrick McHardy in combination with SFQ. 539e5dfb815SPatrick McHardy 540e5dfb815SPatrick McHardy To compile this code as a module, choose M here: the 541e5dfb815SPatrick McHardy module will be called cls_flow. 542e5dfb815SPatrick McHardy 543f4009237SThomas Grafconfig NET_CLS_CGROUP 5448e039d84SBen Blum tristate "Control Group Classifier" 545f4009237SThomas Graf select NET_CLS 546fe1217c4SDaniel Borkmann select CGROUP_NET_CLASSID 547f4009237SThomas Graf depends on CGROUPS 548f4009237SThomas Graf ---help--- 549f4009237SThomas Graf Say Y here if you want to classify packets based on the control 550f4009237SThomas Graf cgroup of their process. 551f4009237SThomas Graf 5528e039d84SBen Blum To compile this code as a module, choose M here: the 5538e039d84SBen Blum module will be called cls_cgroup. 5548e039d84SBen Blum 5557d1d65cbSDaniel Borkmannconfig NET_CLS_BPF 5567d1d65cbSDaniel Borkmann tristate "BPF-based classifier" 5577d1d65cbSDaniel Borkmann select NET_CLS 5587d1d65cbSDaniel Borkmann ---help--- 5597d1d65cbSDaniel Borkmann If you say Y here, you will be able to classify packets based on 5607d1d65cbSDaniel Borkmann programmable BPF (JIT'ed) filters as an alternative to ematches. 5617d1d65cbSDaniel Borkmann 5627d1d65cbSDaniel Borkmann To compile this code as a module, choose M here: the module will 5637d1d65cbSDaniel Borkmann be called cls_bpf. 5647d1d65cbSDaniel Borkmann 56577b9900eSJiri Pirkoconfig NET_CLS_FLOWER 56677b9900eSJiri Pirko tristate "Flower classifier" 56777b9900eSJiri Pirko select NET_CLS 56877b9900eSJiri Pirko ---help--- 56977b9900eSJiri Pirko If you say Y here, you will be able to classify packets based on 57077b9900eSJiri Pirko a configurable combination of packet keys and masks. 57177b9900eSJiri Pirko 57277b9900eSJiri Pirko To compile this code as a module, choose M here: the module will 57377b9900eSJiri Pirko be called cls_flower. 57477b9900eSJiri Pirko 575bf3994d2SJiri Pirkoconfig NET_CLS_MATCHALL 576bf3994d2SJiri Pirko tristate "Match-all classifier" 577bf3994d2SJiri Pirko select NET_CLS 578bf3994d2SJiri Pirko ---help--- 579bf3994d2SJiri Pirko If you say Y here, you will be able to classify packets based on 580bf3994d2SJiri Pirko nothing. Every packet will match. 581bf3994d2SJiri Pirko 582bf3994d2SJiri Pirko To compile this code as a module, choose M here: the module will 583bf3994d2SJiri Pirko be called cls_matchall. 584bf3994d2SJiri Pirko 5851da177e4SLinus Torvaldsconfig NET_EMATCH 5861da177e4SLinus Torvalds bool "Extended Matches" 58752ab4ac2SThomas Graf select NET_CLS 5881da177e4SLinus Torvalds ---help--- 5891da177e4SLinus Torvalds Say Y here if you want to use extended matches on top of classifiers 5901da177e4SLinus Torvalds and select the extended matches below. 5911da177e4SLinus Torvalds 5921da177e4SLinus Torvalds Extended matches are small classification helpers not worth writing 59352ab4ac2SThomas Graf a separate classifier for. 5941da177e4SLinus Torvalds 59552ab4ac2SThomas Graf A recent version of the iproute2 package is required to use 5961da177e4SLinus Torvalds extended matches. 5971da177e4SLinus Torvalds 5981da177e4SLinus Torvaldsconfig NET_EMATCH_STACK 5991da177e4SLinus Torvalds int "Stack size" 6001da177e4SLinus Torvalds depends on NET_EMATCH 6011da177e4SLinus Torvalds default "32" 6021da177e4SLinus Torvalds ---help--- 6031da177e4SLinus Torvalds Size of the local stack variable used while evaluating the tree of 6041da177e4SLinus Torvalds ematches. Limits the depth of the tree, i.e. the number of 605b824979aSThomas Graf encapsulated precedences. Every level requires 4 bytes of additional 6061da177e4SLinus Torvalds stack space. 6071da177e4SLinus Torvalds 6081da177e4SLinus Torvaldsconfig NET_EMATCH_CMP 6091da177e4SLinus Torvalds tristate "Simple packet data comparison" 6101da177e4SLinus Torvalds depends on NET_EMATCH 6111da177e4SLinus Torvalds ---help--- 6121da177e4SLinus Torvalds Say Y here if you want to be able to classify packets based on 6131da177e4SLinus Torvalds simple packet data comparisons for 8, 16, and 32bit values. 6141da177e4SLinus Torvalds 6151da177e4SLinus Torvalds To compile this code as a module, choose M here: the 6161da177e4SLinus Torvalds module will be called em_cmp. 6171da177e4SLinus Torvalds 6181da177e4SLinus Torvaldsconfig NET_EMATCH_NBYTE 6191da177e4SLinus Torvalds tristate "Multi byte comparison" 6201da177e4SLinus Torvalds depends on NET_EMATCH 6211da177e4SLinus Torvalds ---help--- 6221da177e4SLinus Torvalds Say Y here if you want to be able to classify packets based on 6231da177e4SLinus Torvalds multiple byte comparisons mainly useful for IPv6 address comparisons. 6241da177e4SLinus Torvalds 6251da177e4SLinus Torvalds To compile this code as a module, choose M here: the 6261da177e4SLinus Torvalds module will be called em_nbyte. 6271da177e4SLinus Torvalds 6281da177e4SLinus Torvaldsconfig NET_EMATCH_U32 62952ab4ac2SThomas Graf tristate "U32 key" 6301da177e4SLinus Torvalds depends on NET_EMATCH 6311da177e4SLinus Torvalds ---help--- 6321da177e4SLinus Torvalds Say Y here if you want to be able to classify packets using 6331da177e4SLinus Torvalds the famous u32 key in combination with logic relations. 6341da177e4SLinus Torvalds 6351da177e4SLinus Torvalds To compile this code as a module, choose M here: the 6361da177e4SLinus Torvalds module will be called em_u32. 6371da177e4SLinus Torvalds 6381da177e4SLinus Torvaldsconfig NET_EMATCH_META 6391da177e4SLinus Torvalds tristate "Metadata" 6401da177e4SLinus Torvalds depends on NET_EMATCH 6411da177e4SLinus Torvalds ---help--- 642bb7e8c5aSAdrian Bunk Say Y here if you want to be able to classify packets based on 6431da177e4SLinus Torvalds metadata such as load average, netfilter attributes, socket 6441da177e4SLinus Torvalds attributes and routing decisions. 6451da177e4SLinus Torvalds 6461da177e4SLinus Torvalds To compile this code as a module, choose M here: the 6471da177e4SLinus Torvalds module will be called em_meta. 6481da177e4SLinus Torvalds 649d675c989SThomas Grafconfig NET_EMATCH_TEXT 650d675c989SThomas Graf tristate "Textsearch" 651d675c989SThomas Graf depends on NET_EMATCH 652f2d368faSDavid S. Miller select TEXTSEARCH 653f7704347SDavid S. Miller select TEXTSEARCH_KMP 65429cb9f9cSDavid S. Miller select TEXTSEARCH_BM 655f7704347SDavid S. Miller select TEXTSEARCH_FSM 656d675c989SThomas Graf ---help--- 65752ab4ac2SThomas Graf Say Y here if you want to be able to classify packets based on 658f7704347SDavid S. Miller textsearch comparisons. 659d675c989SThomas Graf 660d675c989SThomas Graf To compile this code as a module, choose M here: the 661d675c989SThomas Graf module will be called em_text. 662d675c989SThomas Graf 663f057bbb6SRostislav Lisovyconfig NET_EMATCH_CANID 664f057bbb6SRostislav Lisovy tristate "CAN Identifier" 665a303fbf3SMarc Kleine-Budde depends on NET_EMATCH && (CAN=y || CAN=m) 666f057bbb6SRostislav Lisovy ---help--- 667f057bbb6SRostislav Lisovy Say Y here if you want to be able to classify CAN frames based 668f057bbb6SRostislav Lisovy on CAN Identifier. 669f057bbb6SRostislav Lisovy 670f057bbb6SRostislav Lisovy To compile this code as a module, choose M here: the 671f057bbb6SRostislav Lisovy module will be called em_canid. 672f057bbb6SRostislav Lisovy 6736d4fa852SFlorian Westphalconfig NET_EMATCH_IPSET 6746d4fa852SFlorian Westphal tristate "IPset" 6756d4fa852SFlorian Westphal depends on NET_EMATCH && IP_SET 6766d4fa852SFlorian Westphal ---help--- 6776d4fa852SFlorian Westphal Say Y here if you want to be able to classify packets based on 6786d4fa852SFlorian Westphal ipset membership. 6796d4fa852SFlorian Westphal 6806d4fa852SFlorian Westphal To compile this code as a module, choose M here: the 6816d4fa852SFlorian Westphal module will be called em_ipset. 6826d4fa852SFlorian Westphal 683ccc007e4SEyal Birgerconfig NET_EMATCH_IPT 684ccc007e4SEyal Birger tristate "IPtables Matches" 685ccc007e4SEyal Birger depends on NET_EMATCH && NETFILTER && NETFILTER_XTABLES 686ccc007e4SEyal Birger ---help--- 687ccc007e4SEyal Birger Say Y here to be able to classify packets based on iptables 688ccc007e4SEyal Birger matches. 689ccc007e4SEyal Birger Current supported match is "policy" which allows packet classification 690ccc007e4SEyal Birger based on IPsec policy that was used during decapsulation 691ccc007e4SEyal Birger 692ccc007e4SEyal Birger To compile this code as a module, choose M here: the 693ccc007e4SEyal Birger module will be called em_ipt. 694ccc007e4SEyal Birger 6951da177e4SLinus Torvaldsconfig NET_CLS_ACT 69652ab4ac2SThomas Graf bool "Actions" 6978ec1507dSJiri Pirko select NET_CLS 6981da177e4SLinus Torvalds ---help--- 69952ab4ac2SThomas Graf Say Y here if you want to use traffic control actions. Actions 70052ab4ac2SThomas Graf get attached to classifiers and are invoked after a successful 70152ab4ac2SThomas Graf classification. They are used to overwrite the classification 70252ab4ac2SThomas Graf result, instantly drop or redirect packets, etc. 70352ab4ac2SThomas Graf 70452ab4ac2SThomas Graf A recent version of the iproute2 package is required to use 70552ab4ac2SThomas Graf extended matches. 7061da177e4SLinus Torvalds 7071da177e4SLinus Torvaldsconfig NET_ACT_POLICE 70852ab4ac2SThomas Graf tristate "Traffic Policing" 7091da177e4SLinus Torvalds depends on NET_CLS_ACT 7101da177e4SLinus Torvalds ---help--- 71152ab4ac2SThomas Graf Say Y here if you want to do traffic policing, i.e. strict 71252ab4ac2SThomas Graf bandwidth limiting. This action replaces the existing policing 71352ab4ac2SThomas Graf module. 71452ab4ac2SThomas Graf 71552ab4ac2SThomas Graf To compile this code as a module, choose M here: the 716d4ae20b3SJan Luebbe module will be called act_police. 7171da177e4SLinus Torvalds 7181da177e4SLinus Torvaldsconfig NET_ACT_GACT 71952ab4ac2SThomas Graf tristate "Generic actions" 7201da177e4SLinus Torvalds depends on NET_CLS_ACT 7211da177e4SLinus Torvalds ---help--- 72252ab4ac2SThomas Graf Say Y here to take generic actions such as dropping and 72352ab4ac2SThomas Graf accepting packets. 72452ab4ac2SThomas Graf 72552ab4ac2SThomas Graf To compile this code as a module, choose M here: the 726d4ae20b3SJan Luebbe module will be called act_gact. 7271da177e4SLinus Torvalds 7281da177e4SLinus Torvaldsconfig GACT_PROB 72952ab4ac2SThomas Graf bool "Probability support" 7301da177e4SLinus Torvalds depends on NET_ACT_GACT 7311da177e4SLinus Torvalds ---help--- 73252ab4ac2SThomas Graf Say Y here to use the generic action randomly or deterministically. 7331da177e4SLinus Torvalds 7341da177e4SLinus Torvaldsconfig NET_ACT_MIRRED 73552ab4ac2SThomas Graf tristate "Redirecting and Mirroring" 7361da177e4SLinus Torvalds depends on NET_CLS_ACT 7371da177e4SLinus Torvalds ---help--- 73852ab4ac2SThomas Graf Say Y here to allow packets to be mirrored or redirected to 73952ab4ac2SThomas Graf other devices. 74052ab4ac2SThomas Graf 74152ab4ac2SThomas Graf To compile this code as a module, choose M here: the 742d4ae20b3SJan Luebbe module will be called act_mirred. 7431da177e4SLinus Torvalds 7445c5670faSYotam Gigiconfig NET_ACT_SAMPLE 7455c5670faSYotam Gigi tristate "Traffic Sampling" 7465c5670faSYotam Gigi depends on NET_CLS_ACT 7475c5670faSYotam Gigi select PSAMPLE 7485c5670faSYotam Gigi ---help--- 7495c5670faSYotam Gigi Say Y here to allow packet sampling tc action. The packet sample 7505c5670faSYotam Gigi action consists of statistically choosing packets and sampling 7515c5670faSYotam Gigi them using the psample module. 7525c5670faSYotam Gigi 7535c5670faSYotam Gigi To compile this code as a module, choose M here: the 7545c5670faSYotam Gigi module will be called act_sample. 7555c5670faSYotam Gigi 7561da177e4SLinus Torvaldsconfig NET_ACT_IPT 75752ab4ac2SThomas Graf tristate "IPtables targets" 7581da177e4SLinus Torvalds depends on NET_CLS_ACT && NETFILTER && IP_NF_IPTABLES 7591da177e4SLinus Torvalds ---help--- 7603539c272SMatt LaPlante Say Y here to be able to invoke iptables targets after successful 76152ab4ac2SThomas Graf classification. 76252ab4ac2SThomas Graf 76352ab4ac2SThomas Graf To compile this code as a module, choose M here: the 764d4ae20b3SJan Luebbe module will be called act_ipt. 7651da177e4SLinus Torvalds 766b4219952SHerbert Xuconfig NET_ACT_NAT 767b4219952SHerbert Xu tristate "Stateless NAT" 768b4219952SHerbert Xu depends on NET_CLS_ACT 769b4219952SHerbert Xu ---help--- 770b4219952SHerbert Xu Say Y here to do stateless NAT on IPv4 packets. You should use 771b4219952SHerbert Xu netfilter for NAT unless you know what you are doing. 772b4219952SHerbert Xu 773b4219952SHerbert Xu To compile this code as a module, choose M here: the 774d4ae20b3SJan Luebbe module will be called act_nat. 775b4219952SHerbert Xu 7761da177e4SLinus Torvaldsconfig NET_ACT_PEDIT 77752ab4ac2SThomas Graf tristate "Packet Editing" 7781da177e4SLinus Torvalds depends on NET_CLS_ACT 7791da177e4SLinus Torvalds ---help--- 78052ab4ac2SThomas Graf Say Y here if you want to mangle the content of packets. 7811da177e4SLinus Torvalds 78252ab4ac2SThomas Graf To compile this code as a module, choose M here: the 783d4ae20b3SJan Luebbe module will be called act_pedit. 7841da177e4SLinus Torvalds 785db753079SJamal Hadi Salimconfig NET_ACT_SIMP 78652ab4ac2SThomas Graf tristate "Simple Example (Debug)" 787db753079SJamal Hadi Salim depends on NET_CLS_ACT 788db753079SJamal Hadi Salim ---help--- 78952ab4ac2SThomas Graf Say Y here to add a simple action for demonstration purposes. 79052ab4ac2SThomas Graf It is meant as an example and for debugging purposes. It will 79152ab4ac2SThomas Graf print a configured policy string followed by the packet count 79252ab4ac2SThomas Graf to the console for every packet that passes by. 793db753079SJamal Hadi Salim 79452ab4ac2SThomas Graf If unsure, say N. 79552ab4ac2SThomas Graf 79652ab4ac2SThomas Graf To compile this code as a module, choose M here: the 797d4ae20b3SJan Luebbe module will be called act_simple. 79852ab4ac2SThomas Graf 799ca9b0e27SAlexander Duyckconfig NET_ACT_SKBEDIT 800ca9b0e27SAlexander Duyck tristate "SKB Editing" 801ca9b0e27SAlexander Duyck depends on NET_CLS_ACT 802ca9b0e27SAlexander Duyck ---help--- 803ca9b0e27SAlexander Duyck Say Y here to change skb priority or queue_mapping settings. 804ca9b0e27SAlexander Duyck 805ca9b0e27SAlexander Duyck If unsure, say N. 806ca9b0e27SAlexander Duyck 807ca9b0e27SAlexander Duyck To compile this code as a module, choose M here: the 808d4ae20b3SJan Luebbe module will be called act_skbedit. 809ca9b0e27SAlexander Duyck 810eb4d4065SGrégoire Baronconfig NET_ACT_CSUM 811eb4d4065SGrégoire Baron tristate "Checksum Updating" 8127abac686SDavid S. Miller depends on NET_CLS_ACT && INET 813ab9d226eSDavide Caratti select LIBCRC32C 814eb4d4065SGrégoire Baron ---help--- 815eb4d4065SGrégoire Baron Say Y here to update some common checksum after some direct 816eb4d4065SGrégoire Baron packet alterations. 817eb4d4065SGrégoire Baron 818eb4d4065SGrégoire Baron To compile this code as a module, choose M here: the 819eb4d4065SGrégoire Baron module will be called act_csum. 820eb4d4065SGrégoire Baron 821c7e2b968SJiri Pirkoconfig NET_ACT_VLAN 822c7e2b968SJiri Pirko tristate "Vlan manipulation" 823c7e2b968SJiri Pirko depends on NET_CLS_ACT 824c7e2b968SJiri Pirko ---help--- 825c7e2b968SJiri Pirko Say Y here to push or pop vlan headers. 826c7e2b968SJiri Pirko 827c7e2b968SJiri Pirko If unsure, say N. 828c7e2b968SJiri Pirko 829c7e2b968SJiri Pirko To compile this code as a module, choose M here: the 830c7e2b968SJiri Pirko module will be called act_vlan. 831c7e2b968SJiri Pirko 832d23b8ad8SJiri Pirkoconfig NET_ACT_BPF 833d23b8ad8SJiri Pirko tristate "BPF based action" 834d23b8ad8SJiri Pirko depends on NET_CLS_ACT 835d23b8ad8SJiri Pirko ---help--- 836d23b8ad8SJiri Pirko Say Y here to execute BPF code on packets. The BPF code will decide 837d23b8ad8SJiri Pirko if the packet should be dropped or not. 838d23b8ad8SJiri Pirko 839d23b8ad8SJiri Pirko If unsure, say N. 840d23b8ad8SJiri Pirko 841d23b8ad8SJiri Pirko To compile this code as a module, choose M here: the 842d23b8ad8SJiri Pirko module will be called act_bpf. 843d23b8ad8SJiri Pirko 84422a5dc0eSFelix Fietkauconfig NET_ACT_CONNMARK 84522a5dc0eSFelix Fietkau tristate "Netfilter Connection Mark Retriever" 84622a5dc0eSFelix Fietkau depends on NET_CLS_ACT && NETFILTER && IP_NF_IPTABLES 8472dbce096SArnd Bergmann depends on NF_CONNTRACK && NF_CONNTRACK_MARK 84822a5dc0eSFelix Fietkau ---help--- 84922a5dc0eSFelix Fietkau Say Y here to allow retrieving of conn mark 85022a5dc0eSFelix Fietkau 85122a5dc0eSFelix Fietkau If unsure, say N. 85222a5dc0eSFelix Fietkau 85322a5dc0eSFelix Fietkau To compile this code as a module, choose M here: the 85422a5dc0eSFelix Fietkau module will be called act_connmark. 85522a5dc0eSFelix Fietkau 85686da71b5SJamal Hadi Salimconfig NET_ACT_SKBMOD 85786da71b5SJamal Hadi Salim tristate "skb data modification action" 85886da71b5SJamal Hadi Salim depends on NET_CLS_ACT 85986da71b5SJamal Hadi Salim ---help--- 86086da71b5SJamal Hadi Salim Say Y here to allow modification of skb data 86186da71b5SJamal Hadi Salim 86286da71b5SJamal Hadi Salim If unsure, say N. 86386da71b5SJamal Hadi Salim 86486da71b5SJamal Hadi Salim To compile this code as a module, choose M here: the 86586da71b5SJamal Hadi Salim module will be called act_skbmod. 86686da71b5SJamal Hadi Salim 867ef6980b6SJamal Hadi Salimconfig NET_ACT_IFE 868ef6980b6SJamal Hadi Salim tristate "Inter-FE action based on IETF ForCES InterFE LFB" 869ef6980b6SJamal Hadi Salim depends on NET_CLS_ACT 870295a6e06SYotam Gigi select NET_IFE 871ef6980b6SJamal Hadi Salim ---help--- 872ef6980b6SJamal Hadi Salim Say Y here to allow for sourcing and terminating metadata 873ef6980b6SJamal Hadi Salim For details refer to netdev01 paper: 874ef6980b6SJamal Hadi Salim "Distributing Linux Traffic Control Classifier-Action Subsystem" 875ef6980b6SJamal Hadi Salim Authors: Jamal Hadi Salim and Damascene M. Joachimpillai 876ef6980b6SJamal Hadi Salim 877ef6980b6SJamal Hadi Salim To compile this code as a module, choose M here: the 878ef6980b6SJamal Hadi Salim module will be called act_ife. 879ef6980b6SJamal Hadi Salim 880d0f6dd8aSAmir Vadaiconfig NET_ACT_TUNNEL_KEY 881d0f6dd8aSAmir Vadai tristate "IP tunnel metadata manipulation" 882d0f6dd8aSAmir Vadai depends on NET_CLS_ACT 883d0f6dd8aSAmir Vadai ---help--- 884d0f6dd8aSAmir Vadai Say Y here to set/release ip tunnel metadata. 885d0f6dd8aSAmir Vadai 886d0f6dd8aSAmir Vadai If unsure, say N. 887d0f6dd8aSAmir Vadai 888d0f6dd8aSAmir Vadai To compile this code as a module, choose M here: the 889d0f6dd8aSAmir Vadai module will be called act_tunnel_key. 890d0f6dd8aSAmir Vadai 891084e2f65SJamal Hadi Salimconfig NET_IFE_SKBMARK 892084e2f65SJamal Hadi Salim tristate "Support to encoding decoding skb mark on IFE action" 893084e2f65SJamal Hadi Salim depends on NET_ACT_IFE 894084e2f65SJamal Hadi Salim 895200e10f4SJamal Hadi Salimconfig NET_IFE_SKBPRIO 896200e10f4SJamal Hadi Salim tristate "Support to encoding decoding skb prio on IFE action" 897200e10f4SJamal Hadi Salim depends on NET_ACT_IFE 898200e10f4SJamal Hadi Salim 899408fbc22SJamal Hadi Salimconfig NET_IFE_SKBTCINDEX 900408fbc22SJamal Hadi Salim tristate "Support to encoding decoding skb tcindex on IFE action" 901408fbc22SJamal Hadi Salim depends on NET_ACT_IFE 902408fbc22SJamal Hadi Salim 90352ab4ac2SThomas Grafconfig NET_CLS_IND 90452ab4ac2SThomas Graf bool "Incoming device classification" 90505b8b0faSRoman Zippel depends on NET_CLS_U32 || NET_CLS_FW 90652ab4ac2SThomas Graf ---help--- 90752ab4ac2SThomas Graf Say Y here to extend the u32 and fw classifier to support 90852ab4ac2SThomas Graf classification based on the incoming device. This option is 90952ab4ac2SThomas Graf likely to disappear in favour of the metadata ematch. 91052ab4ac2SThomas Graf 91105b8b0faSRoman Zippelendif # NET_SCHED 91205b8b0faSRoman Zippel 91385ef3e5cSRandy Dunlapconfig NET_SCH_FIFO 91485ef3e5cSRandy Dunlap bool 915