xref: /linux/net/sched/Kconfig (revision 856e7c4b619af622d56b3b454f7bec32a170ac99)
1#
2# Traffic control configuration.
3#
4
5menuconfig NET_SCHED
6	bool "QoS and/or fair queueing"
7	select NET_SCH_FIFO
8	---help---
9	  When the kernel has several packets to send out over a network
10	  device, it has to decide which ones to send first, which ones to
11	  delay, and which ones to drop. This is the job of the queueing
12	  disciplines, several different algorithms for how to do this
13	  "fairly" have been proposed.
14
15	  If you say N here, you will get the standard packet scheduler, which
16	  is a FIFO (first come, first served). If you say Y here, you will be
17	  able to choose from among several alternative algorithms which can
18	  then be attached to different network devices. This is useful for
19	  example if some of your network devices are real time devices that
20	  need a certain minimum data flow rate, or if you need to limit the
21	  maximum data flow rate for traffic which matches specified criteria.
22	  This code is considered to be experimental.
23
24	  To administer these schedulers, you'll need the user-level utilities
25	  from the package iproute2+tc at
26	  <https://www.kernel.org/pub/linux/utils/net/iproute2/>.  That package
27	  also contains some documentation; for more, check out
28	  <http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2>.
29
30	  This Quality of Service (QoS) support will enable you to use
31	  Differentiated Services (diffserv) and Resource Reservation Protocol
32	  (RSVP) on your Linux router if you also say Y to the corresponding
33	  classifiers below.  Documentation and software is at
34	  <http://diffserv.sourceforge.net/>.
35
36	  If you say Y here and to "/proc file system" below, you will be able
37	  to read status information about packet schedulers from the file
38	  /proc/net/psched.
39
40	  The available schedulers are listed in the following questions; you
41	  can say Y to as many as you like. If unsure, say N now.
42
43if NET_SCHED
44
45comment "Queueing/Scheduling"
46
47config NET_SCH_CBQ
48	tristate "Class Based Queueing (CBQ)"
49	---help---
50	  Say Y here if you want to use the Class-Based Queueing (CBQ) packet
51	  scheduling algorithm. This algorithm classifies the waiting packets
52	  into a tree-like hierarchy of classes; the leaves of this tree are
53	  in turn scheduled by separate algorithms.
54
55	  See the top of <file:net/sched/sch_cbq.c> for more details.
56
57	  CBQ is a commonly used scheduler, so if you're unsure, you should
58	  say Y here. Then say Y to all the queueing algorithms below that you
59	  want to use as leaf disciplines.
60
61	  To compile this code as a module, choose M here: the
62	  module will be called sch_cbq.
63
64config NET_SCH_HTB
65	tristate "Hierarchical Token Bucket (HTB)"
66	---help---
67	  Say Y here if you want to use the Hierarchical Token Buckets (HTB)
68	  packet scheduling algorithm. See
69	  <http://luxik.cdi.cz/~devik/qos/htb/> for complete manual and
70	  in-depth articles.
71
72	  HTB is very similar to CBQ regarding its goals however is has
73	  different properties and different algorithm.
74
75	  To compile this code as a module, choose M here: the
76	  module will be called sch_htb.
77
78config NET_SCH_HFSC
79	tristate "Hierarchical Fair Service Curve (HFSC)"
80	---help---
81	  Say Y here if you want to use the Hierarchical Fair Service Curve
82	  (HFSC) packet scheduling algorithm.
83
84	  To compile this code as a module, choose M here: the
85	  module will be called sch_hfsc.
86
87config NET_SCH_ATM
88	tristate "ATM Virtual Circuits (ATM)"
89	depends on ATM
90	---help---
91	  Say Y here if you want to use the ATM pseudo-scheduler.  This
92	  provides a framework for invoking classifiers, which in turn
93	  select classes of this queuing discipline.  Each class maps
94	  the flow(s) it is handling to a given virtual circuit.
95
96	  See the top of <file:net/sched/sch_atm.c> for more details.
97
98	  To compile this code as a module, choose M here: the
99	  module will be called sch_atm.
100
101config NET_SCH_PRIO
102	tristate "Multi Band Priority Queueing (PRIO)"
103	---help---
104	  Say Y here if you want to use an n-band priority queue packet
105	  scheduler.
106
107	  To compile this code as a module, choose M here: the
108	  module will be called sch_prio.
109
110config NET_SCH_MULTIQ
111	tristate "Hardware Multiqueue-aware Multi Band Queuing (MULTIQ)"
112	---help---
113	  Say Y here if you want to use an n-band queue packet scheduler
114	  to support devices that have multiple hardware transmit queues.
115
116	  To compile this code as a module, choose M here: the
117	  module will be called sch_multiq.
118
119config NET_SCH_RED
120	tristate "Random Early Detection (RED)"
121	---help---
122	  Say Y here if you want to use the Random Early Detection (RED)
123	  packet scheduling algorithm.
124
125	  See the top of <file:net/sched/sch_red.c> for more details.
126
127	  To compile this code as a module, choose M here: the
128	  module will be called sch_red.
129
130config NET_SCH_SFB
131	tristate "Stochastic Fair Blue (SFB)"
132	---help---
133	  Say Y here if you want to use the Stochastic Fair Blue (SFB)
134	  packet scheduling algorithm.
135
136	  See the top of <file:net/sched/sch_sfb.c> for more details.
137
138	  To compile this code as a module, choose M here: the
139	  module will be called sch_sfb.
140
141config NET_SCH_SFQ
142	tristate "Stochastic Fairness Queueing (SFQ)"
143	---help---
144	  Say Y here if you want to use the Stochastic Fairness Queueing (SFQ)
145	  packet scheduling algorithm.
146
147	  See the top of <file:net/sched/sch_sfq.c> for more details.
148
149	  To compile this code as a module, choose M here: the
150	  module will be called sch_sfq.
151
152config NET_SCH_TEQL
153	tristate "True Link Equalizer (TEQL)"
154	---help---
155	  Say Y here if you want to use the True Link Equalizer (TLE) packet
156	  scheduling algorithm. This queueing discipline allows the combination
157	  of several physical devices into one virtual device.
158
159	  See the top of <file:net/sched/sch_teql.c> for more details.
160
161	  To compile this code as a module, choose M here: the
162	  module will be called sch_teql.
163
164config NET_SCH_TBF
165	tristate "Token Bucket Filter (TBF)"
166	---help---
167	  Say Y here if you want to use the Token Bucket Filter (TBF) packet
168	  scheduling algorithm.
169
170	  See the top of <file:net/sched/sch_tbf.c> for more details.
171
172	  To compile this code as a module, choose M here: the
173	  module will be called sch_tbf.
174
175config NET_SCH_CBS
176	tristate "Credit Based Shaper (CBS)"
177	---help---
178	  Say Y here if you want to use the Credit Based Shaper (CBS) packet
179	  scheduling algorithm.
180
181	  See the top of <file:net/sched/sch_cbs.c> for more details.
182
183	  To compile this code as a module, choose M here: the
184	  module will be called sch_cbs.
185
186config NET_SCH_GRED
187	tristate "Generic Random Early Detection (GRED)"
188	---help---
189	  Say Y here if you want to use the Generic Random Early Detection
190	  (GRED) packet scheduling algorithm for some of your network devices
191	  (see the top of <file:net/sched/sch_red.c> for details and
192	  references about the algorithm).
193
194	  To compile this code as a module, choose M here: the
195	  module will be called sch_gred.
196
197config NET_SCH_DSMARK
198	tristate "Differentiated Services marker (DSMARK)"
199	---help---
200	  Say Y if you want to schedule packets according to the
201	  Differentiated Services architecture proposed in RFC 2475.
202	  Technical information on this method, with pointers to associated
203	  RFCs, is available at <http://www.gta.ufrj.br/diffserv/>.
204
205	  To compile this code as a module, choose M here: the
206	  module will be called sch_dsmark.
207
208config NET_SCH_NETEM
209	tristate "Network emulator (NETEM)"
210	---help---
211	  Say Y if you want to emulate network delay, loss, and packet
212	  re-ordering. This is often useful to simulate networks when
213	  testing applications or protocols.
214
215	  To compile this driver as a module, choose M here: the module
216	  will be called sch_netem.
217
218	  If unsure, say N.
219
220config NET_SCH_DRR
221	tristate "Deficit Round Robin scheduler (DRR)"
222	help
223	  Say Y here if you want to use the Deficit Round Robin (DRR) packet
224	  scheduling algorithm.
225
226	  To compile this driver as a module, choose M here: the module
227	  will be called sch_drr.
228
229	  If unsure, say N.
230
231config NET_SCH_MQPRIO
232	tristate "Multi-queue priority scheduler (MQPRIO)"
233	help
234	  Say Y here if you want to use the Multi-queue Priority scheduler.
235	  This scheduler allows QOS to be offloaded on NICs that have support
236	  for offloading QOS schedulers.
237
238	  To compile this driver as a module, choose M here: the module will
239	  be called sch_mqprio.
240
241	  If unsure, say N.
242
243config NET_SCH_CHOKE
244	tristate "CHOose and Keep responsive flow scheduler (CHOKE)"
245	help
246	  Say Y here if you want to use the CHOKe packet scheduler (CHOose
247	  and Keep for responsive flows, CHOose and Kill for unresponsive
248	  flows). This is a variation of RED which trys to penalize flows
249	  that monopolize the queue.
250
251	  To compile this code as a module, choose M here: the
252	  module will be called sch_choke.
253
254config NET_SCH_QFQ
255	tristate "Quick Fair Queueing scheduler (QFQ)"
256	help
257	  Say Y here if you want to use the Quick Fair Queueing Scheduler (QFQ)
258	  packet scheduling algorithm.
259
260	  To compile this driver as a module, choose M here: the module
261	  will be called sch_qfq.
262
263	  If unsure, say N.
264
265config NET_SCH_CODEL
266	tristate "Controlled Delay AQM (CODEL)"
267	help
268	  Say Y here if you want to use the Controlled Delay (CODEL)
269	  packet scheduling algorithm.
270
271	  To compile this driver as a module, choose M here: the module
272	  will be called sch_codel.
273
274	  If unsure, say N.
275
276config NET_SCH_FQ_CODEL
277	tristate "Fair Queue Controlled Delay AQM (FQ_CODEL)"
278	help
279	  Say Y here if you want to use the FQ Controlled Delay (FQ_CODEL)
280	  packet scheduling algorithm.
281
282	  To compile this driver as a module, choose M here: the module
283	  will be called sch_fq_codel.
284
285	  If unsure, say N.
286
287config NET_SCH_FQ
288	tristate "Fair Queue"
289	help
290	  Say Y here if you want to use the FQ packet scheduling algorithm.
291
292	  FQ does flow separation, and is able to respect pacing requirements
293	  set by TCP stack into sk->sk_pacing_rate (for localy generated
294	  traffic)
295
296	  To compile this driver as a module, choose M here: the module
297	  will be called sch_fq.
298
299	  If unsure, say N.
300
301config NET_SCH_HHF
302	tristate "Heavy-Hitter Filter (HHF)"
303	help
304	  Say Y here if you want to use the Heavy-Hitter Filter (HHF)
305	  packet scheduling algorithm.
306
307	  To compile this driver as a module, choose M here: the module
308	  will be called sch_hhf.
309
310config NET_SCH_PIE
311	tristate "Proportional Integral controller Enhanced (PIE) scheduler"
312	help
313	  Say Y here if you want to use the Proportional Integral controller
314	  Enhanced scheduler packet scheduling algorithm.
315	  For more information, please see
316	  http://tools.ietf.org/html/draft-pan-tsvwg-pie-00
317
318	  To compile this driver as a module, choose M here: the module
319	  will be called sch_pie.
320
321	  If unsure, say N.
322
323config NET_SCH_INGRESS
324	tristate "Ingress/classifier-action Qdisc"
325	depends on NET_CLS_ACT
326	select NET_INGRESS
327	select NET_EGRESS
328	---help---
329	  Say Y here if you want to use classifiers for incoming and/or outgoing
330	  packets. This qdisc doesn't do anything else besides running classifiers,
331	  which can also have actions attached to them. In case of outgoing packets,
332	  classifiers that this qdisc holds are executed in the transmit path
333	  before real enqueuing to an egress qdisc happens.
334
335	  If unsure, say Y.
336
337	  To compile this code as a module, choose M here: the module will be
338	  called sch_ingress with alias of sch_clsact.
339
340config NET_SCH_PLUG
341	tristate "Plug network traffic until release (PLUG)"
342	---help---
343
344	  This queuing discipline allows userspace to plug/unplug a network
345	  output queue, using the netlink interface.  When it receives an
346	  enqueue command it inserts a plug into the outbound queue that
347	  causes following packets to enqueue until a dequeue command arrives
348	  over netlink, causing the plug to be removed and resuming the normal
349	  packet flow.
350
351	  This module also provides a generic "network output buffering"
352	  functionality (aka output commit), wherein upon arrival of a dequeue
353	  command, only packets up to the first plug are released for delivery.
354	  The Remus HA project uses this module to enable speculative execution
355	  of virtual machines by allowing the generated network output to be rolled
356	  back if needed.
357
358	  For more information, please refer to <http://wiki.xenproject.org/wiki/Remus>
359
360	  Say Y here if you are using this kernel for Xen dom0 and
361	  want to protect Xen guests with Remus.
362
363	  To compile this code as a module, choose M here: the
364	  module will be called sch_plug.
365
366menuconfig NET_SCH_DEFAULT
367	bool "Allow override default queue discipline"
368	---help---
369	  Support for selection of default queuing discipline.
370
371	  Nearly all users can safely say no here, and the default
372	  of pfifo_fast will be used. Many distributions already set
373	  the default value via /proc/sys/net/core/default_qdisc.
374
375	  If unsure, say N.
376
377if NET_SCH_DEFAULT
378
379choice
380	prompt "Default queuing discipline"
381	default DEFAULT_PFIFO_FAST
382	help
383	  Select the queueing discipline that will be used by default
384	  for all network devices.
385
386	config DEFAULT_FQ
387		bool "Fair Queue" if NET_SCH_FQ
388
389	config DEFAULT_CODEL
390		bool "Controlled Delay" if NET_SCH_CODEL
391
392	config DEFAULT_FQ_CODEL
393		bool "Fair Queue Controlled Delay" if NET_SCH_FQ_CODEL
394
395	config DEFAULT_SFQ
396		bool "Stochastic Fair Queue" if NET_SCH_SFQ
397
398	config DEFAULT_PFIFO_FAST
399		bool "Priority FIFO Fast"
400endchoice
401
402config DEFAULT_NET_SCH
403	string
404	default "pfifo_fast" if DEFAULT_PFIFO_FAST
405	default "fq" if DEFAULT_FQ
406	default "fq_codel" if DEFAULT_FQ_CODEL
407	default "sfq" if DEFAULT_SFQ
408	default "pfifo_fast"
409endif
410
411comment "Classification"
412
413config NET_CLS
414	bool
415
416config NET_CLS_BASIC
417	tristate "Elementary classification (BASIC)"
418	select NET_CLS
419	---help---
420	  Say Y here if you want to be able to classify packets using
421	  only extended matches and actions.
422
423	  To compile this code as a module, choose M here: the
424	  module will be called cls_basic.
425
426config NET_CLS_TCINDEX
427	tristate "Traffic-Control Index (TCINDEX)"
428	select NET_CLS
429	---help---
430	  Say Y here if you want to be able to classify packets based on
431	  traffic control indices. You will want this feature if you want
432	  to implement Differentiated Services together with DSMARK.
433
434	  To compile this code as a module, choose M here: the
435	  module will be called cls_tcindex.
436
437config NET_CLS_ROUTE4
438	tristate "Routing decision (ROUTE)"
439	depends on INET
440	select IP_ROUTE_CLASSID
441	select NET_CLS
442	---help---
443	  If you say Y here, you will be able to classify packets
444	  according to the route table entry they matched.
445
446	  To compile this code as a module, choose M here: the
447	  module will be called cls_route.
448
449config NET_CLS_FW
450	tristate "Netfilter mark (FW)"
451	select NET_CLS
452	---help---
453	  If you say Y here, you will be able to classify packets
454	  according to netfilter/firewall marks.
455
456	  To compile this code as a module, choose M here: the
457	  module will be called cls_fw.
458
459config NET_CLS_U32
460	tristate "Universal 32bit comparisons w/ hashing (U32)"
461	select NET_CLS
462	---help---
463	  Say Y here to be able to classify packets using a universal
464	  32bit pieces based comparison scheme.
465
466	  To compile this code as a module, choose M here: the
467	  module will be called cls_u32.
468
469config CLS_U32_PERF
470	bool "Performance counters support"
471	depends on NET_CLS_U32
472	---help---
473	  Say Y here to make u32 gather additional statistics useful for
474	  fine tuning u32 classifiers.
475
476config CLS_U32_MARK
477	bool "Netfilter marks support"
478	depends on NET_CLS_U32
479	---help---
480	  Say Y here to be able to use netfilter marks as u32 key.
481
482config NET_CLS_RSVP
483	tristate "IPv4 Resource Reservation Protocol (RSVP)"
484	select NET_CLS
485	---help---
486	  The Resource Reservation Protocol (RSVP) permits end systems to
487	  request a minimum and maximum data flow rate for a connection; this
488	  is important for real time data such as streaming sound or video.
489
490	  Say Y here if you want to be able to classify outgoing packets based
491	  on their RSVP requests.
492
493	  To compile this code as a module, choose M here: the
494	  module will be called cls_rsvp.
495
496config NET_CLS_RSVP6
497	tristate "IPv6 Resource Reservation Protocol (RSVP6)"
498	select NET_CLS
499	---help---
500	  The Resource Reservation Protocol (RSVP) permits end systems to
501	  request a minimum and maximum data flow rate for a connection; this
502	  is important for real time data such as streaming sound or video.
503
504	  Say Y here if you want to be able to classify outgoing packets based
505	  on their RSVP requests and you are using the IPv6 protocol.
506
507	  To compile this code as a module, choose M here: the
508	  module will be called cls_rsvp6.
509
510config NET_CLS_FLOW
511	tristate "Flow classifier"
512	select NET_CLS
513	---help---
514	  If you say Y here, you will be able to classify packets based on
515	  a configurable combination of packet keys. This is mostly useful
516	  in combination with SFQ.
517
518	  To compile this code as a module, choose M here: the
519	  module will be called cls_flow.
520
521config NET_CLS_CGROUP
522	tristate "Control Group Classifier"
523	select NET_CLS
524	select CGROUP_NET_CLASSID
525	depends on CGROUPS
526	---help---
527	  Say Y here if you want to classify packets based on the control
528	  cgroup of their process.
529
530	  To compile this code as a module, choose M here: the
531	  module will be called cls_cgroup.
532
533config NET_CLS_BPF
534	tristate "BPF-based classifier"
535	select NET_CLS
536	---help---
537	  If you say Y here, you will be able to classify packets based on
538	  programmable BPF (JIT'ed) filters as an alternative to ematches.
539
540	  To compile this code as a module, choose M here: the module will
541	  be called cls_bpf.
542
543config NET_CLS_FLOWER
544	tristate "Flower classifier"
545	select NET_CLS
546	---help---
547	  If you say Y here, you will be able to classify packets based on
548	  a configurable combination of packet keys and masks.
549
550	  To compile this code as a module, choose M here: the module will
551	  be called cls_flower.
552
553config NET_CLS_MATCHALL
554	tristate "Match-all classifier"
555	select NET_CLS
556	---help---
557	  If you say Y here, you will be able to classify packets based on
558	  nothing. Every packet will match.
559
560	  To compile this code as a module, choose M here: the module will
561	  be called cls_matchall.
562
563config NET_EMATCH
564	bool "Extended Matches"
565	select NET_CLS
566	---help---
567	  Say Y here if you want to use extended matches on top of classifiers
568	  and select the extended matches below.
569
570	  Extended matches are small classification helpers not worth writing
571	  a separate classifier for.
572
573	  A recent version of the iproute2 package is required to use
574	  extended matches.
575
576config NET_EMATCH_STACK
577	int "Stack size"
578	depends on NET_EMATCH
579	default "32"
580	---help---
581	  Size of the local stack variable used while evaluating the tree of
582	  ematches. Limits the depth of the tree, i.e. the number of
583	  encapsulated precedences. Every level requires 4 bytes of additional
584	  stack space.
585
586config NET_EMATCH_CMP
587	tristate "Simple packet data comparison"
588	depends on NET_EMATCH
589	---help---
590	  Say Y here if you want to be able to classify packets based on
591	  simple packet data comparisons for 8, 16, and 32bit values.
592
593	  To compile this code as a module, choose M here: the
594	  module will be called em_cmp.
595
596config NET_EMATCH_NBYTE
597	tristate "Multi byte comparison"
598	depends on NET_EMATCH
599	---help---
600	  Say Y here if you want to be able to classify packets based on
601	  multiple byte comparisons mainly useful for IPv6 address comparisons.
602
603	  To compile this code as a module, choose M here: the
604	  module will be called em_nbyte.
605
606config NET_EMATCH_U32
607	tristate "U32 key"
608	depends on NET_EMATCH
609	---help---
610	  Say Y here if you want to be able to classify packets using
611	  the famous u32 key in combination with logic relations.
612
613	  To compile this code as a module, choose M here: the
614	  module will be called em_u32.
615
616config NET_EMATCH_META
617	tristate "Metadata"
618	depends on NET_EMATCH
619	---help---
620	  Say Y here if you want to be able to classify packets based on
621	  metadata such as load average, netfilter attributes, socket
622	  attributes and routing decisions.
623
624	  To compile this code as a module, choose M here: the
625	  module will be called em_meta.
626
627config NET_EMATCH_TEXT
628	tristate "Textsearch"
629	depends on NET_EMATCH
630	select TEXTSEARCH
631	select TEXTSEARCH_KMP
632	select TEXTSEARCH_BM
633	select TEXTSEARCH_FSM
634	---help---
635	  Say Y here if you want to be able to classify packets based on
636	  textsearch comparisons.
637
638	  To compile this code as a module, choose M here: the
639	  module will be called em_text.
640
641config NET_EMATCH_CANID
642	tristate "CAN Identifier"
643	depends on NET_EMATCH && (CAN=y || CAN=m)
644	---help---
645	  Say Y here if you want to be able to classify CAN frames based
646	  on CAN Identifier.
647
648	  To compile this code as a module, choose M here: the
649	  module will be called em_canid.
650
651config NET_EMATCH_IPSET
652	tristate "IPset"
653	depends on NET_EMATCH && IP_SET
654	---help---
655	  Say Y here if you want to be able to classify packets based on
656	  ipset membership.
657
658	  To compile this code as a module, choose M here: the
659	  module will be called em_ipset.
660
661config NET_EMATCH_IPT
662	tristate "IPtables Matches"
663	depends on NET_EMATCH && NETFILTER && NETFILTER_XTABLES
664	---help---
665	  Say Y here to be able to classify packets based on iptables
666	  matches.
667	  Current supported match is "policy" which allows packet classification
668	  based on IPsec policy that was used during decapsulation
669
670	  To compile this code as a module, choose M here: the
671	  module will be called em_ipt.
672
673config NET_CLS_ACT
674	bool "Actions"
675	select NET_CLS
676	---help---
677	  Say Y here if you want to use traffic control actions. Actions
678	  get attached to classifiers and are invoked after a successful
679	  classification. They are used to overwrite the classification
680	  result, instantly drop or redirect packets, etc.
681
682	  A recent version of the iproute2 package is required to use
683	  extended matches.
684
685config NET_ACT_POLICE
686	tristate "Traffic Policing"
687        depends on NET_CLS_ACT
688        ---help---
689	  Say Y here if you want to do traffic policing, i.e. strict
690	  bandwidth limiting. This action replaces the existing policing
691	  module.
692
693	  To compile this code as a module, choose M here: the
694	  module will be called act_police.
695
696config NET_ACT_GACT
697        tristate "Generic actions"
698        depends on NET_CLS_ACT
699        ---help---
700	  Say Y here to take generic actions such as dropping and
701	  accepting packets.
702
703	  To compile this code as a module, choose M here: the
704	  module will be called act_gact.
705
706config GACT_PROB
707        bool "Probability support"
708        depends on NET_ACT_GACT
709        ---help---
710	  Say Y here to use the generic action randomly or deterministically.
711
712config NET_ACT_MIRRED
713        tristate "Redirecting and Mirroring"
714        depends on NET_CLS_ACT
715        ---help---
716	  Say Y here to allow packets to be mirrored or redirected to
717	  other devices.
718
719	  To compile this code as a module, choose M here: the
720	  module will be called act_mirred.
721
722config NET_ACT_SAMPLE
723        tristate "Traffic Sampling"
724        depends on NET_CLS_ACT
725        select PSAMPLE
726        ---help---
727	  Say Y here to allow packet sampling tc action. The packet sample
728	  action consists of statistically choosing packets and sampling
729	  them using the psample module.
730
731	  To compile this code as a module, choose M here: the
732	  module will be called act_sample.
733
734config NET_ACT_IPT
735        tristate "IPtables targets"
736        depends on NET_CLS_ACT && NETFILTER && IP_NF_IPTABLES
737        ---help---
738	  Say Y here to be able to invoke iptables targets after successful
739	  classification.
740
741	  To compile this code as a module, choose M here: the
742	  module will be called act_ipt.
743
744config NET_ACT_NAT
745        tristate "Stateless NAT"
746        depends on NET_CLS_ACT
747        ---help---
748	  Say Y here to do stateless NAT on IPv4 packets.  You should use
749	  netfilter for NAT unless you know what you are doing.
750
751	  To compile this code as a module, choose M here: the
752	  module will be called act_nat.
753
754config NET_ACT_PEDIT
755        tristate "Packet Editing"
756        depends on NET_CLS_ACT
757        ---help---
758	  Say Y here if you want to mangle the content of packets.
759
760	  To compile this code as a module, choose M here: the
761	  module will be called act_pedit.
762
763config NET_ACT_SIMP
764        tristate "Simple Example (Debug)"
765        depends on NET_CLS_ACT
766        ---help---
767	  Say Y here to add a simple action for demonstration purposes.
768	  It is meant as an example and for debugging purposes. It will
769	  print a configured policy string followed by the packet count
770	  to the console for every packet that passes by.
771
772	  If unsure, say N.
773
774	  To compile this code as a module, choose M here: the
775	  module will be called act_simple.
776
777config NET_ACT_SKBEDIT
778        tristate "SKB Editing"
779        depends on NET_CLS_ACT
780        ---help---
781	  Say Y here to change skb priority or queue_mapping settings.
782
783	  If unsure, say N.
784
785	  To compile this code as a module, choose M here: the
786	  module will be called act_skbedit.
787
788config NET_ACT_CSUM
789        tristate "Checksum Updating"
790        depends on NET_CLS_ACT && INET
791        select LIBCRC32C
792        ---help---
793	  Say Y here to update some common checksum after some direct
794	  packet alterations.
795
796	  To compile this code as a module, choose M here: the
797	  module will be called act_csum.
798
799config NET_ACT_VLAN
800        tristate "Vlan manipulation"
801        depends on NET_CLS_ACT
802        ---help---
803	  Say Y here to push or pop vlan headers.
804
805	  If unsure, say N.
806
807	  To compile this code as a module, choose M here: the
808	  module will be called act_vlan.
809
810config NET_ACT_BPF
811        tristate "BPF based action"
812        depends on NET_CLS_ACT
813        ---help---
814	  Say Y here to execute BPF code on packets. The BPF code will decide
815	  if the packet should be dropped or not.
816
817	  If unsure, say N.
818
819	  To compile this code as a module, choose M here: the
820	  module will be called act_bpf.
821
822config NET_ACT_CONNMARK
823        tristate "Netfilter Connection Mark Retriever"
824        depends on NET_CLS_ACT && NETFILTER && IP_NF_IPTABLES
825        depends on NF_CONNTRACK && NF_CONNTRACK_MARK
826        ---help---
827	  Say Y here to allow retrieving of conn mark
828
829	  If unsure, say N.
830
831	  To compile this code as a module, choose M here: the
832	  module will be called act_connmark.
833
834config NET_ACT_SKBMOD
835        tristate "skb data modification action"
836        depends on NET_CLS_ACT
837        ---help---
838         Say Y here to allow modification of skb data
839
840         If unsure, say N.
841
842         To compile this code as a module, choose M here: the
843         module will be called act_skbmod.
844
845config NET_ACT_IFE
846        tristate "Inter-FE action based on IETF ForCES InterFE LFB"
847        depends on NET_CLS_ACT
848        select NET_IFE
849        ---help---
850	  Say Y here to allow for sourcing and terminating metadata
851	  For details refer to netdev01 paper:
852	  "Distributing Linux Traffic Control Classifier-Action Subsystem"
853	   Authors: Jamal Hadi Salim and Damascene M. Joachimpillai
854
855	  To compile this code as a module, choose M here: the
856	  module will be called act_ife.
857
858config NET_ACT_TUNNEL_KEY
859        tristate "IP tunnel metadata manipulation"
860        depends on NET_CLS_ACT
861        ---help---
862	  Say Y here to set/release ip tunnel metadata.
863
864	  If unsure, say N.
865
866	  To compile this code as a module, choose M here: the
867	  module will be called act_tunnel_key.
868
869config NET_IFE_SKBMARK
870        tristate "Support to encoding decoding skb mark on IFE action"
871        depends on NET_ACT_IFE
872
873config NET_IFE_SKBPRIO
874        tristate "Support to encoding decoding skb prio on IFE action"
875        depends on NET_ACT_IFE
876
877config NET_IFE_SKBTCINDEX
878        tristate "Support to encoding decoding skb tcindex on IFE action"
879        depends on NET_ACT_IFE
880
881config NET_CLS_IND
882	bool "Incoming device classification"
883	depends on NET_CLS_U32 || NET_CLS_FW
884	---help---
885	  Say Y here to extend the u32 and fw classifier to support
886	  classification based on the incoming device. This option is
887	  likely to disappear in favour of the metadata ematch.
888
889endif # NET_SCHED
890
891config NET_SCH_FIFO
892	bool
893