Kconfig 28 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945
  1. # SPDX-License-Identifier: GPL-2.0-only
  2. #
  3. # Traffic control configuration.
  4. #
  5. menuconfig NET_SCHED
  6. bool "QoS and/or fair queueing"
  7. select NET_SCH_FIFO
  8. help
  9. When the kernel has several packets to send out over a network
  10. device, it has to decide which ones to send first, which ones to
  11. delay, and which ones to drop. This is the job of the queueing
  12. disciplines, several different algorithms for how to do this
  13. "fairly" have been proposed.
  14. If you say N here, you will get the standard packet scheduler, which
  15. is a FIFO (first come, first served). If you say Y here, you will be
  16. able to choose from among several alternative algorithms which can
  17. then be attached to different network devices. This is useful for
  18. example if some of your network devices are real time devices that
  19. need a certain minimum data flow rate, or if you need to limit the
  20. maximum data flow rate for traffic which matches specified criteria.
  21. This code is considered to be experimental.
  22. To administer these schedulers, you'll need the user-level utilities
  23. from the package iproute2+tc at
  24. <https://www.kernel.org/pub/linux/utils/net/iproute2/>. That package
  25. also contains some documentation; for more, check out
  26. <http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2>.
  27. This Quality of Service (QoS) support will enable you to use
  28. Differentiated Services (diffserv) and Resource Reservation Protocol
  29. (RSVP) on your Linux router if you also say Y to the corresponding
  30. classifiers below. Documentation and software is at
  31. <http://diffserv.sourceforge.net/>.
  32. If you say Y here and to "/proc file system" below, you will be able
  33. to read status information about packet schedulers from the file
  34. /proc/net/psched.
  35. The available schedulers are listed in the following questions; you
  36. can say Y to as many as you like. If unsure, say N now.
  37. if NET_SCHED
  38. comment "Queueing/Scheduling"
  39. config NET_SCH_HTB
  40. tristate "Hierarchical Token Bucket (HTB)"
  41. help
  42. Say Y here if you want to use the Hierarchical Token Buckets (HTB)
  43. packet scheduling algorithm. See
  44. <http://luxik.cdi.cz/~devik/qos/htb/> for complete manual and
  45. in-depth articles.
  46. HTB is very similar to CBQ regarding its goals however is has
  47. different properties and different algorithm.
  48. To compile this code as a module, choose M here: the
  49. module will be called sch_htb.
  50. config NET_SCH_HFSC
  51. tristate "Hierarchical Fair Service Curve (HFSC)"
  52. help
  53. Say Y here if you want to use the Hierarchical Fair Service Curve
  54. (HFSC) packet scheduling algorithm.
  55. To compile this code as a module, choose M here: the
  56. module will be called sch_hfsc.
  57. config NET_SCH_PRIO
  58. tristate "Multi Band Priority Queueing (PRIO)"
  59. help
  60. Say Y here if you want to use an n-band priority queue packet
  61. scheduler.
  62. To compile this code as a module, choose M here: the
  63. module will be called sch_prio.
  64. config NET_SCH_MULTIQ
  65. tristate "Hardware Multiqueue-aware Multi Band Queuing (MULTIQ)"
  66. help
  67. Say Y here if you want to use an n-band queue packet scheduler
  68. to support devices that have multiple hardware transmit queues.
  69. To compile this code as a module, choose M here: the
  70. module will be called sch_multiq.
  71. config NET_SCH_RED
  72. tristate "Random Early Detection (RED)"
  73. help
  74. Say Y here if you want to use the Random Early Detection (RED)
  75. packet scheduling algorithm.
  76. See the top of <file:net/sched/sch_red.c> for more details.
  77. To compile this code as a module, choose M here: the
  78. module will be called sch_red.
  79. config NET_SCH_SFB
  80. tristate "Stochastic Fair Blue (SFB)"
  81. help
  82. Say Y here if you want to use the Stochastic Fair Blue (SFB)
  83. packet scheduling algorithm.
  84. See the top of <file:net/sched/sch_sfb.c> for more details.
  85. To compile this code as a module, choose M here: the
  86. module will be called sch_sfb.
  87. config NET_SCH_SFQ
  88. tristate "Stochastic Fairness Queueing (SFQ)"
  89. help
  90. Say Y here if you want to use the Stochastic Fairness Queueing (SFQ)
  91. packet scheduling algorithm.
  92. See the top of <file:net/sched/sch_sfq.c> for more details.
  93. To compile this code as a module, choose M here: the
  94. module will be called sch_sfq.
  95. config NET_SCH_TEQL
  96. tristate "True Link Equalizer (TEQL)"
  97. help
  98. Say Y here if you want to use the True Link Equalizer (TLE) packet
  99. scheduling algorithm. This queueing discipline allows the combination
  100. of several physical devices into one virtual device.
  101. See the top of <file:net/sched/sch_teql.c> for more details.
  102. To compile this code as a module, choose M here: the
  103. module will be called sch_teql.
  104. config NET_SCH_TBF
  105. tristate "Token Bucket Filter (TBF)"
  106. help
  107. Say Y here if you want to use the Token Bucket Filter (TBF) packet
  108. scheduling algorithm.
  109. See the top of <file:net/sched/sch_tbf.c> for more details.
  110. To compile this code as a module, choose M here: the
  111. module will be called sch_tbf.
  112. config NET_SCH_CBS
  113. tristate "Credit Based Shaper (CBS)"
  114. help
  115. Say Y here if you want to use the Credit Based Shaper (CBS) packet
  116. scheduling algorithm.
  117. See the top of <file:net/sched/sch_cbs.c> for more details.
  118. To compile this code as a module, choose M here: the
  119. module will be called sch_cbs.
  120. config NET_SCH_ETF
  121. tristate "Earliest TxTime First (ETF)"
  122. help
  123. Say Y here if you want to use the Earliest TxTime First (ETF) packet
  124. scheduling algorithm.
  125. See the top of <file:net/sched/sch_etf.c> for more details.
  126. To compile this code as a module, choose M here: the
  127. module will be called sch_etf.
  128. config NET_SCH_MQPRIO_LIB
  129. tristate
  130. help
  131. Common library for manipulating mqprio queue configurations.
  132. config NET_SCH_TAPRIO
  133. tristate "Time Aware Priority (taprio) Scheduler"
  134. select NET_SCH_MQPRIO_LIB
  135. help
  136. Say Y here if you want to use the Time Aware Priority (taprio) packet
  137. scheduling algorithm.
  138. See the top of <file:net/sched/sch_taprio.c> for more details.
  139. To compile this code as a module, choose M here: the
  140. module will be called sch_taprio.
  141. config NET_SCH_GRED
  142. tristate "Generic Random Early Detection (GRED)"
  143. help
  144. Say Y here if you want to use the Generic Random Early Detection
  145. (GRED) packet scheduling algorithm for some of your network devices
  146. (see the top of <file:net/sched/sch_red.c> for details and
  147. references about the algorithm).
  148. To compile this code as a module, choose M here: the
  149. module will be called sch_gred.
  150. config NET_SCH_NETEM
  151. tristate "Network emulator (NETEM)"
  152. help
  153. Say Y if you want to emulate network delay, loss, and packet
  154. re-ordering. This is often useful to simulate networks when
  155. testing applications or protocols.
  156. To compile this driver as a module, choose M here: the module
  157. will be called sch_netem.
  158. If unsure, say N.
  159. config NET_SCH_DRR
  160. tristate "Deficit Round Robin scheduler (DRR)"
  161. help
  162. Say Y here if you want to use the Deficit Round Robin (DRR) packet
  163. scheduling algorithm.
  164. To compile this driver as a module, choose M here: the module
  165. will be called sch_drr.
  166. If unsure, say N.
  167. config NET_SCH_MQPRIO
  168. tristate "Multi-queue priority scheduler (MQPRIO)"
  169. select NET_SCH_MQPRIO_LIB
  170. help
  171. Say Y here if you want to use the Multi-queue Priority scheduler.
  172. This scheduler allows QOS to be offloaded on NICs that have support
  173. for offloading QOS schedulers.
  174. To compile this driver as a module, choose M here: the module will
  175. be called sch_mqprio.
  176. If unsure, say N.
  177. config NET_SCH_SKBPRIO
  178. tristate "SKB priority queue scheduler (SKBPRIO)"
  179. help
  180. Say Y here if you want to use the SKB priority queue
  181. scheduler. This schedules packets according to skb->priority,
  182. which is useful for request packets in DoS mitigation systems such
  183. as Gatekeeper.
  184. To compile this driver as a module, choose M here: the module will
  185. be called sch_skbprio.
  186. If unsure, say N.
  187. config NET_SCH_CHOKE
  188. tristate "CHOose and Keep responsive flow scheduler (CHOKE)"
  189. help
  190. Say Y here if you want to use the CHOKe packet scheduler (CHOose
  191. and Keep for responsive flows, CHOose and Kill for unresponsive
  192. flows). This is a variation of RED which tries to penalize flows
  193. that monopolize the queue.
  194. To compile this code as a module, choose M here: the
  195. module will be called sch_choke.
  196. config NET_SCH_QFQ
  197. tristate "Quick Fair Queueing scheduler (QFQ)"
  198. help
  199. Say Y here if you want to use the Quick Fair Queueing Scheduler (QFQ)
  200. packet scheduling algorithm.
  201. To compile this driver as a module, choose M here: the module
  202. will be called sch_qfq.
  203. If unsure, say N.
  204. config NET_SCH_CODEL
  205. tristate "Controlled Delay AQM (CODEL)"
  206. help
  207. Say Y here if you want to use the Controlled Delay (CODEL)
  208. packet scheduling algorithm.
  209. To compile this driver as a module, choose M here: the module
  210. will be called sch_codel.
  211. If unsure, say N.
  212. config NET_SCH_FQ_CODEL
  213. tristate "Fair Queue Controlled Delay AQM (FQ_CODEL)"
  214. help
  215. Say Y here if you want to use the FQ Controlled Delay (FQ_CODEL)
  216. packet scheduling algorithm.
  217. To compile this driver as a module, choose M here: the module
  218. will be called sch_fq_codel.
  219. If unsure, say N.
  220. config NET_SCH_CAKE
  221. tristate "Common Applications Kept Enhanced (CAKE)"
  222. help
  223. Say Y here if you want to use the Common Applications Kept Enhanced
  224. (CAKE) queue management algorithm.
  225. To compile this driver as a module, choose M here: the module
  226. will be called sch_cake.
  227. If unsure, say N.
  228. config NET_SCH_FQ
  229. tristate "Fair Queue"
  230. help
  231. Say Y here if you want to use the FQ packet scheduling algorithm.
  232. FQ does flow separation, and is able to respect pacing requirements
  233. set by TCP stack into sk->sk_pacing_rate (for locally generated
  234. traffic)
  235. To compile this driver as a module, choose M here: the module
  236. will be called sch_fq.
  237. If unsure, say N.
  238. config NET_SCH_HHF
  239. tristate "Heavy-Hitter Filter (HHF)"
  240. help
  241. Say Y here if you want to use the Heavy-Hitter Filter (HHF)
  242. packet scheduling algorithm.
  243. To compile this driver as a module, choose M here: the module
  244. will be called sch_hhf.
  245. config NET_SCH_PIE
  246. tristate "Proportional Integral controller Enhanced (PIE) scheduler"
  247. help
  248. Say Y here if you want to use the Proportional Integral controller
  249. Enhanced scheduler packet scheduling algorithm.
  250. For more information, please see https://tools.ietf.org/html/rfc8033
  251. To compile this driver as a module, choose M here: the module
  252. will be called sch_pie.
  253. If unsure, say N.
  254. config NET_SCH_FQ_PIE
  255. depends on NET_SCH_PIE
  256. tristate "Flow Queue Proportional Integral controller Enhanced (FQ-PIE)"
  257. help
  258. Say Y here if you want to use the Flow Queue Proportional Integral
  259. controller Enhanced (FQ-PIE) packet scheduling algorithm.
  260. For more information, please see https://tools.ietf.org/html/rfc8033
  261. To compile this driver as a module, choose M here: the module
  262. will be called sch_fq_pie.
  263. If unsure, say N.
  264. config NET_SCH_INGRESS
  265. tristate "Ingress/classifier-action Qdisc"
  266. depends on NET_CLS_ACT
  267. select NET_XGRESS
  268. help
  269. Say Y here if you want to use classifiers for incoming and/or outgoing
  270. packets. This qdisc doesn't do anything else besides running classifiers,
  271. which can also have actions attached to them. In case of outgoing packets,
  272. classifiers that this qdisc holds are executed in the transmit path
  273. before real enqueuing to an egress qdisc happens.
  274. If unsure, say Y.
  275. To compile this code as a module, choose M here: the module will be
  276. called sch_ingress with alias of sch_clsact.
  277. config NET_SCH_PLUG
  278. tristate "Plug network traffic until release (PLUG)"
  279. help
  280. This queuing discipline allows userspace to plug/unplug a network
  281. output queue, using the netlink interface. When it receives an
  282. enqueue command it inserts a plug into the outbound queue that
  283. causes following packets to enqueue until a dequeue command arrives
  284. over netlink, causing the plug to be removed and resuming the normal
  285. packet flow.
  286. This module also provides a generic "network output buffering"
  287. functionality (aka output commit), wherein upon arrival of a dequeue
  288. command, only packets up to the first plug are released for delivery.
  289. The Remus HA project uses this module to enable speculative execution
  290. of virtual machines by allowing the generated network output to be rolled
  291. back if needed.
  292. For more information, please refer to <http://wiki.xenproject.org/wiki/Remus>
  293. Say Y here if you are using this kernel for Xen dom0 and
  294. want to protect Xen guests with Remus.
  295. To compile this code as a module, choose M here: the
  296. module will be called sch_plug.
  297. config NET_SCH_ETS
  298. tristate "Enhanced transmission selection scheduler (ETS)"
  299. help
  300. The Enhanced Transmission Selection scheduler is a classful
  301. queuing discipline that merges functionality of PRIO and DRR
  302. qdiscs in one scheduler. ETS makes it easy to configure a set of
  303. strict and bandwidth-sharing bands to implement the transmission
  304. selection described in 802.1Qaz.
  305. Say Y here if you want to use the ETS packet scheduling
  306. algorithm.
  307. To compile this driver as a module, choose M here: the module
  308. will be called sch_ets.
  309. If unsure, say N.
  310. menuconfig NET_SCH_DEFAULT
  311. bool "Allow override default queue discipline"
  312. help
  313. Support for selection of default queuing discipline.
  314. Nearly all users can safely say no here, and the default
  315. of pfifo_fast will be used. Many distributions already set
  316. the default value via /proc/sys/net/core/default_qdisc.
  317. If unsure, say N.
  318. if NET_SCH_DEFAULT
  319. choice
  320. prompt "Default queuing discipline"
  321. default DEFAULT_PFIFO_FAST
  322. help
  323. Select the queueing discipline that will be used by default
  324. for all network devices.
  325. config DEFAULT_FQ
  326. bool "Fair Queue" if NET_SCH_FQ
  327. config DEFAULT_CODEL
  328. bool "Controlled Delay" if NET_SCH_CODEL
  329. config DEFAULT_FQ_CODEL
  330. bool "Fair Queue Controlled Delay" if NET_SCH_FQ_CODEL
  331. config DEFAULT_FQ_PIE
  332. bool "Flow Queue Proportional Integral controller Enhanced" if NET_SCH_FQ_PIE
  333. config DEFAULT_SFQ
  334. bool "Stochastic Fair Queue" if NET_SCH_SFQ
  335. config DEFAULT_PFIFO_FAST
  336. bool "Priority FIFO Fast"
  337. endchoice
  338. config DEFAULT_NET_SCH
  339. string
  340. default "pfifo_fast" if DEFAULT_PFIFO_FAST
  341. default "fq" if DEFAULT_FQ
  342. default "fq_codel" if DEFAULT_FQ_CODEL
  343. default "fq_pie" if DEFAULT_FQ_PIE
  344. default "sfq" if DEFAULT_SFQ
  345. default "pfifo_fast"
  346. endif
  347. comment "Classification"
  348. config NET_CLS
  349. bool
  350. config NET_CLS_BASIC
  351. tristate "Elementary classification (BASIC)"
  352. select NET_CLS
  353. help
  354. Say Y here if you want to be able to classify packets using
  355. only extended matches and actions.
  356. To compile this code as a module, choose M here: the
  357. module will be called cls_basic.
  358. config NET_CLS_ROUTE4
  359. tristate "Routing decision (ROUTE)"
  360. depends on INET
  361. select IP_ROUTE_CLASSID
  362. select NET_CLS
  363. help
  364. If you say Y here, you will be able to classify packets
  365. according to the route table entry they matched.
  366. To compile this code as a module, choose M here: the
  367. module will be called cls_route.
  368. config NET_CLS_FW
  369. tristate "Netfilter mark (FW)"
  370. select NET_CLS
  371. help
  372. If you say Y here, you will be able to classify packets
  373. according to netfilter/firewall marks.
  374. To compile this code as a module, choose M here: the
  375. module will be called cls_fw.
  376. config NET_CLS_U32
  377. tristate "Universal 32bit comparisons w/ hashing (U32)"
  378. select NET_CLS
  379. help
  380. Say Y here to be able to classify packets using a universal
  381. 32bit pieces based comparison scheme.
  382. To compile this code as a module, choose M here: the
  383. module will be called cls_u32.
  384. config CLS_U32_PERF
  385. bool "Performance counters support"
  386. depends on NET_CLS_U32
  387. help
  388. Say Y here to make u32 gather additional statistics useful for
  389. fine tuning u32 classifiers.
  390. config CLS_U32_MARK
  391. bool "Netfilter marks support"
  392. depends on NET_CLS_U32
  393. help
  394. Say Y here to be able to use netfilter marks as u32 key.
  395. config NET_CLS_FLOW
  396. tristate "Flow classifier"
  397. select NET_CLS
  398. help
  399. If you say Y here, you will be able to classify packets based on
  400. a configurable combination of packet keys. This is mostly useful
  401. in combination with SFQ.
  402. To compile this code as a module, choose M here: the
  403. module will be called cls_flow.
  404. config NET_CLS_CGROUP
  405. tristate "Control Group Classifier"
  406. select NET_CLS
  407. select CGROUP_NET_CLASSID
  408. depends on CGROUPS
  409. help
  410. Say Y here if you want to classify packets based on the control
  411. cgroup of their process.
  412. To compile this code as a module, choose M here: the
  413. module will be called cls_cgroup.
  414. config NET_CLS_BPF
  415. tristate "BPF-based classifier"
  416. select NET_CLS
  417. help
  418. If you say Y here, you will be able to classify packets based on
  419. programmable BPF (JIT'ed) filters as an alternative to ematches.
  420. To compile this code as a module, choose M here: the module will
  421. be called cls_bpf.
  422. config NET_CLS_FLOWER
  423. tristate "Flower classifier"
  424. select NET_CLS
  425. help
  426. If you say Y here, you will be able to classify packets based on
  427. a configurable combination of packet keys and masks.
  428. To compile this code as a module, choose M here: the module will
  429. be called cls_flower.
  430. config NET_CLS_MATCHALL
  431. tristate "Match-all classifier"
  432. select NET_CLS
  433. help
  434. If you say Y here, you will be able to classify packets based on
  435. nothing. Every packet will match.
  436. To compile this code as a module, choose M here: the module will
  437. be called cls_matchall.
  438. config NET_EMATCH
  439. bool "Extended Matches"
  440. select NET_CLS
  441. help
  442. Say Y here if you want to use extended matches on top of classifiers
  443. and select the extended matches below.
  444. Extended matches are small classification helpers not worth writing
  445. a separate classifier for.
  446. A recent version of the iproute2 package is required to use
  447. extended matches.
  448. config NET_EMATCH_STACK
  449. int "Stack size"
  450. depends on NET_EMATCH
  451. default "32"
  452. help
  453. Size of the local stack variable used while evaluating the tree of
  454. ematches. Limits the depth of the tree, i.e. the number of
  455. encapsulated precedences. Every level requires 4 bytes of additional
  456. stack space.
  457. config NET_EMATCH_CMP
  458. tristate "Simple packet data comparison"
  459. depends on NET_EMATCH
  460. help
  461. Say Y here if you want to be able to classify packets based on
  462. simple packet data comparisons for 8, 16, and 32bit values.
  463. To compile this code as a module, choose M here: the
  464. module will be called em_cmp.
  465. config NET_EMATCH_NBYTE
  466. tristate "Multi byte comparison"
  467. depends on NET_EMATCH
  468. help
  469. Say Y here if you want to be able to classify packets based on
  470. multiple byte comparisons mainly useful for IPv6 address comparisons.
  471. To compile this code as a module, choose M here: the
  472. module will be called em_nbyte.
  473. config NET_EMATCH_U32
  474. tristate "U32 key"
  475. depends on NET_EMATCH
  476. help
  477. Say Y here if you want to be able to classify packets using
  478. the famous u32 key in combination with logic relations.
  479. To compile this code as a module, choose M here: the
  480. module will be called em_u32.
  481. config NET_EMATCH_META
  482. tristate "Metadata"
  483. depends on NET_EMATCH
  484. help
  485. Say Y here if you want to be able to classify packets based on
  486. metadata such as load average, netfilter attributes, socket
  487. attributes and routing decisions.
  488. To compile this code as a module, choose M here: the
  489. module will be called em_meta.
  490. config NET_EMATCH_TEXT
  491. tristate "Textsearch"
  492. depends on NET_EMATCH
  493. select TEXTSEARCH
  494. select TEXTSEARCH_KMP
  495. select TEXTSEARCH_BM
  496. select TEXTSEARCH_FSM
  497. help
  498. Say Y here if you want to be able to classify packets based on
  499. textsearch comparisons.
  500. To compile this code as a module, choose M here: the
  501. module will be called em_text.
  502. config NET_EMATCH_CANID
  503. tristate "CAN Identifier"
  504. depends on NET_EMATCH && (CAN=y || CAN=m)
  505. help
  506. Say Y here if you want to be able to classify CAN frames based
  507. on CAN Identifier.
  508. To compile this code as a module, choose M here: the
  509. module will be called em_canid.
  510. config NET_EMATCH_IPSET
  511. tristate "IPset"
  512. depends on NET_EMATCH && IP_SET
  513. help
  514. Say Y here if you want to be able to classify packets based on
  515. ipset membership.
  516. To compile this code as a module, choose M here: the
  517. module will be called em_ipset.
  518. config NET_EMATCH_IPT
  519. tristate "IPtables Matches"
  520. depends on NET_EMATCH && NETFILTER && NETFILTER_XTABLES
  521. help
  522. Say Y here to be able to classify packets based on iptables
  523. matches.
  524. Current supported match is "policy" which allows packet classification
  525. based on IPsec policy that was used during decapsulation
  526. To compile this code as a module, choose M here: the
  527. module will be called em_ipt.
  528. config NET_CLS_ACT
  529. bool "Actions"
  530. select NET_CLS
  531. select NET_XGRESS
  532. help
  533. Say Y here if you want to use traffic control actions. Actions
  534. get attached to classifiers and are invoked after a successful
  535. classification. They are used to overwrite the classification
  536. result, instantly drop or redirect packets, etc.
  537. A recent version of the iproute2 package is required to use
  538. extended matches.
  539. config NET_ACT_POLICE
  540. tristate "Traffic Policing"
  541. depends on NET_CLS_ACT
  542. help
  543. Say Y here if you want to do traffic policing, i.e. strict
  544. bandwidth limiting. This action replaces the existing policing
  545. module.
  546. To compile this code as a module, choose M here: the
  547. module will be called act_police.
  548. config NET_ACT_GACT
  549. tristate "Generic actions"
  550. depends on NET_CLS_ACT
  551. help
  552. Say Y here to take generic actions such as dropping and
  553. accepting packets.
  554. To compile this code as a module, choose M here: the
  555. module will be called act_gact.
  556. config GACT_PROB
  557. bool "Probability support"
  558. depends on NET_ACT_GACT
  559. help
  560. Say Y here to use the generic action randomly or deterministically.
  561. config NET_ACT_MIRRED
  562. tristate "Redirecting and Mirroring"
  563. depends on NET_CLS_ACT
  564. help
  565. Say Y here to allow packets to be mirrored or redirected to
  566. other devices.
  567. To compile this code as a module, choose M here: the
  568. module will be called act_mirred.
  569. config NET_ACT_SAMPLE
  570. tristate "Traffic Sampling"
  571. depends on NET_CLS_ACT
  572. select PSAMPLE
  573. help
  574. Say Y here to allow packet sampling tc action. The packet sample
  575. action consists of statistically choosing packets and sampling
  576. them using the psample module.
  577. To compile this code as a module, choose M here: the
  578. module will be called act_sample.
  579. config NET_ACT_NAT
  580. tristate "Stateless NAT"
  581. depends on NET_CLS_ACT
  582. help
  583. Say Y here to do stateless NAT on IPv4 packets. You should use
  584. netfilter for NAT unless you know what you are doing.
  585. To compile this code as a module, choose M here: the
  586. module will be called act_nat.
  587. config NET_ACT_PEDIT
  588. tristate "Packet Editing"
  589. depends on NET_CLS_ACT
  590. help
  591. Say Y here if you want to mangle the content of packets.
  592. To compile this code as a module, choose M here: the
  593. module will be called act_pedit.
  594. config NET_ACT_SIMP
  595. tristate "Simple Example (Debug)"
  596. depends on NET_CLS_ACT
  597. help
  598. Say Y here to add a simple action for demonstration purposes.
  599. It is meant as an example and for debugging purposes. It will
  600. print a configured policy string followed by the packet count
  601. to the console for every packet that passes by.
  602. If unsure, say N.
  603. To compile this code as a module, choose M here: the
  604. module will be called act_simple.
  605. config NET_ACT_SKBEDIT
  606. tristate "SKB Editing"
  607. depends on NET_CLS_ACT
  608. help
  609. Say Y here to change skb priority or queue_mapping settings.
  610. If unsure, say N.
  611. To compile this code as a module, choose M here: the
  612. module will be called act_skbedit.
  613. config NET_ACT_CSUM
  614. tristate "Checksum Updating"
  615. depends on NET_CLS_ACT && INET
  616. select LIBCRC32C
  617. help
  618. Say Y here to update some common checksum after some direct
  619. packet alterations.
  620. To compile this code as a module, choose M here: the
  621. module will be called act_csum.
  622. config NET_ACT_MPLS
  623. tristate "MPLS manipulation"
  624. depends on NET_CLS_ACT
  625. help
  626. Say Y here to push or pop MPLS headers.
  627. If unsure, say N.
  628. To compile this code as a module, choose M here: the
  629. module will be called act_mpls.
  630. config NET_ACT_VLAN
  631. tristate "Vlan manipulation"
  632. depends on NET_CLS_ACT
  633. help
  634. Say Y here to push or pop vlan headers.
  635. If unsure, say N.
  636. To compile this code as a module, choose M here: the
  637. module will be called act_vlan.
  638. config NET_ACT_BPF
  639. tristate "BPF based action"
  640. depends on NET_CLS_ACT
  641. help
  642. Say Y here to execute BPF code on packets. The BPF code will decide
  643. if the packet should be dropped or not.
  644. If unsure, say N.
  645. To compile this code as a module, choose M here: the
  646. module will be called act_bpf.
  647. config NET_ACT_CONNMARK
  648. tristate "Netfilter Connection Mark Retriever"
  649. depends on NET_CLS_ACT && NETFILTER
  650. depends on NF_CONNTRACK && NF_CONNTRACK_MARK
  651. help
  652. Say Y here to allow retrieving of conn mark
  653. If unsure, say N.
  654. To compile this code as a module, choose M here: the
  655. module will be called act_connmark.
  656. config NET_ACT_CTINFO
  657. tristate "Netfilter Connection Mark Actions"
  658. depends on NET_CLS_ACT && NETFILTER
  659. depends on NF_CONNTRACK && NF_CONNTRACK_MARK
  660. help
  661. Say Y here to allow transfer of a connmark stored information.
  662. Current actions transfer connmark stored DSCP into
  663. ipv4/v6 diffserv and/or to transfer connmark to packet
  664. mark. Both are useful for restoring egress based marks
  665. back onto ingress connections for qdisc priority mapping
  666. purposes.
  667. If unsure, say N.
  668. To compile this code as a module, choose M here: the
  669. module will be called act_ctinfo.
  670. config NET_ACT_SKBMOD
  671. tristate "skb data modification action"
  672. depends on NET_CLS_ACT
  673. help
  674. Say Y here to allow modification of skb data
  675. If unsure, say N.
  676. To compile this code as a module, choose M here: the
  677. module will be called act_skbmod.
  678. config NET_ACT_IFE
  679. tristate "Inter-FE action based on IETF ForCES InterFE LFB"
  680. depends on NET_CLS_ACT
  681. select NET_IFE
  682. help
  683. Say Y here to allow for sourcing and terminating metadata
  684. For details refer to netdev01 paper:
  685. "Distributing Linux Traffic Control Classifier-Action Subsystem"
  686. Authors: Jamal Hadi Salim and Damascene M. Joachimpillai
  687. To compile this code as a module, choose M here: the
  688. module will be called act_ife.
  689. config NET_ACT_TUNNEL_KEY
  690. tristate "IP tunnel metadata manipulation"
  691. depends on NET_CLS_ACT
  692. help
  693. Say Y here to set/release ip tunnel metadata.
  694. If unsure, say N.
  695. To compile this code as a module, choose M here: the
  696. module will be called act_tunnel_key.
  697. config NET_ACT_CT
  698. tristate "connection tracking tc action"
  699. depends on NET_CLS_ACT && NF_CONNTRACK && (!NF_NAT || NF_NAT) && NF_FLOW_TABLE
  700. select NF_CONNTRACK_OVS
  701. select NF_NAT_OVS if NF_NAT
  702. help
  703. Say Y here to allow sending the packets to conntrack module.
  704. If unsure, say N.
  705. To compile this code as a module, choose M here: the
  706. module will be called act_ct.
  707. config NET_ACT_GATE
  708. tristate "Frame gate entry list control tc action"
  709. depends on NET_CLS_ACT
  710. help
  711. Say Y here to allow to control the ingress flow to be passed at
  712. specific time slot and be dropped at other specific time slot by
  713. the gate entry list.
  714. If unsure, say N.
  715. To compile this code as a module, choose M here: the
  716. module will be called act_gate.
  717. config NET_IFE_SKBMARK
  718. tristate "Support to encoding decoding skb mark on IFE action"
  719. depends on NET_ACT_IFE
  720. config NET_IFE_SKBPRIO
  721. tristate "Support to encoding decoding skb prio on IFE action"
  722. depends on NET_ACT_IFE
  723. config NET_IFE_SKBTCINDEX
  724. tristate "Support to encoding decoding skb tcindex on IFE action"
  725. depends on NET_ACT_IFE
  726. config NET_TC_SKB_EXT
  727. bool "TC recirculation support"
  728. depends on NET_CLS_ACT
  729. select SKB_EXTENSIONS
  730. help
  731. Say Y here to allow tc chain misses to continue in OvS datapath in
  732. the correct recirc_id, and hardware chain misses to continue in
  733. the correct chain in tc software datapath.
  734. Say N here if you won't be using tc<->ovs offload or tc chains offload.
  735. endif # NET_SCHED
  736. config NET_SCH_FIFO
  737. bool