[mirror_ubuntu-artful-kernel.git] / net / ipv6 / Kconfig

#
# IPv6 configuration
#

#   IPv6 as module will cause a CRASH if you try to unload it
menuconfig IPV6
	tristate "The IPv6 protocol"
	default y
	---help---
	  Support for IP version 6 (IPv6).

	  For general information about IPv6, see
	  <https://en.wikipedia.org/wiki/IPv6>.
	  For specific information about IPv6 under Linux, see
	  Documentation/networking/ipv6.txt and read the HOWTO at
	  <http://www.tldp.org/HOWTO/Linux+IPv6-HOWTO/>

	  To compile this protocol support as a module, choose M here: the 
	  module will be called ipv6.

if IPV6

config IPV6_ROUTER_PREF
	bool "IPv6: Router Preference (RFC 4191) support"
	---help---
	  Router Preference is an optional extension to the Router
	  Advertisement message which improves the ability of hosts
	  to pick an appropriate router, especially when the hosts
	  are placed in a multi-homed network.

	  If unsure, say N.

config IPV6_ROUTE_INFO
	bool "IPv6: Route Information (RFC 4191) support"
	depends on IPV6_ROUTER_PREF
	---help---
	  This is experimental support of Route Information.

	  If unsure, say N.

config IPV6_OPTIMISTIC_DAD
	bool "IPv6: Enable RFC 4429 Optimistic DAD"
	---help---
	  This is experimental support for optimistic Duplicate
	  Address Detection.  It allows for autoconfigured addresses
	  to be used more quickly.

	  If unsure, say N.

config INET6_AH
	tristate "IPv6: AH transformation"
	select XFRM_ALGO
	select CRYPTO
	select CRYPTO_HMAC
	select CRYPTO_MD5
	select CRYPTO_SHA1
	---help---
	  Support for IPsec AH.

	  If unsure, say Y.

config INET6_ESP
	tristate "IPv6: ESP transformation"
	select XFRM_ALGO
	select CRYPTO
	select CRYPTO_AUTHENC
	select CRYPTO_HMAC
	select CRYPTO_MD5
	select CRYPTO_CBC
	select CRYPTO_SHA1
	select CRYPTO_DES
	select CRYPTO_ECHAINIV
	---help---
	  Support for IPsec ESP.

	  If unsure, say Y.

config INET6_IPCOMP
	tristate "IPv6: IPComp transformation"
	select INET6_XFRM_TUNNEL
	select XFRM_IPCOMP
	---help---
	  Support for IP Payload Compression Protocol (IPComp) (RFC3173),
	  typically needed for IPsec.

	  If unsure, say Y.

config IPV6_MIP6
	tristate "IPv6: Mobility"
	select XFRM
	---help---
	  Support for IPv6 Mobility described in RFC 3775.

	  If unsure, say N.

config IPV6_ILA
	tristate "IPv6: Identifier Locator Addressing (ILA)"
	depends on NETFILTER
	select LWTUNNEL
	---help---
	  Support for IPv6 Identifier Locator Addressing (ILA).

	  ILA is a mechanism to do network virtualization without
	  encapsulation. The basic concept of ILA is that we split an
	  IPv6 address into a 64 bit locator and 64 bit identifier. The
	  identifier is the identity of an entity in communication
	  ("who") and the locator expresses the location of the
	  entity ("where").

	  ILA can be configured using the "encap ila" option with
	  "ip -6 route" command. ILA is described in
	  https://tools.ietf.org/html/draft-herbert-nvo3-ila-00.

	  If unsure, say N.

config INET6_XFRM_TUNNEL
	tristate
	select INET6_TUNNEL
	default n

config INET6_TUNNEL
	tristate
	default n

config INET6_XFRM_MODE_TRANSPORT
	tristate "IPv6: IPsec transport mode"
	default IPV6
	select XFRM
	---help---
	  Support for IPsec transport mode.

	  If unsure, say Y.

config INET6_XFRM_MODE_TUNNEL
	tristate "IPv6: IPsec tunnel mode"
	default IPV6
	select XFRM
	---help---
	  Support for IPsec tunnel mode.

	  If unsure, say Y.

config INET6_XFRM_MODE_BEET
	tristate "IPv6: IPsec BEET mode"
	default IPV6
	select XFRM
	---help---
	  Support for IPsec BEET mode.

	  If unsure, say Y.

config INET6_XFRM_MODE_ROUTEOPTIMIZATION
	tristate "IPv6: MIPv6 route optimization mode"
	select XFRM
	---help---
	  Support for MIPv6 route optimization mode.

config IPV6_VTI
tristate "Virtual (secure) IPv6: tunneling"
	select IPV6_TUNNEL
	select NET_IP_TUNNEL
	depends on INET6_XFRM_MODE_TUNNEL
	---help---
	Tunneling means encapsulating data of one protocol type within
	another protocol and sending it over a channel that understands the
	encapsulating protocol. This can be used with xfrm mode tunnel to give
	the notion of a secure tunnel for IPSEC and then use routing protocol
	on top.

config IPV6_SIT
	tristate "IPv6: IPv6-in-IPv4 tunnel (SIT driver)"
	select INET_TUNNEL
	select NET_IP_TUNNEL
	select IPV6_NDISC_NODETYPE
	default y
	---help---
	  Tunneling means encapsulating data of one protocol type within
	  another protocol and sending it over a channel that understands the
	  encapsulating protocol. This driver implements encapsulation of IPv6
	  into IPv4 packets. This is useful if you want to connect two IPv6
	  networks over an IPv4-only path.

	  Saying M here will produce a module called sit. If unsure, say Y.

config IPV6_SIT_6RD
	bool "IPv6: IPv6 Rapid Deployment (6RD)"
	depends on IPV6_SIT
	default n
	---help---
	  IPv6 Rapid Deployment (6rd; draft-ietf-softwire-ipv6-6rd) builds upon
	  mechanisms of 6to4 (RFC3056) to enable a service provider to rapidly
	  deploy IPv6 unicast service to IPv4 sites to which it provides
	  customer premise equipment.  Like 6to4, it utilizes stateless IPv6 in
	  IPv4 encapsulation in order to transit IPv4-only network
	  infrastructure.  Unlike 6to4, a 6rd service provider uses an IPv6
	  prefix of its own in place of the fixed 6to4 prefix.

	  With this option enabled, the SIT driver offers 6rd functionality by
	  providing additional ioctl API to configure the IPv6 Prefix for in
	  stead of static 2002::/16 for 6to4.

	  If unsure, say N.

config IPV6_NDISC_NODETYPE
	bool

config IPV6_TUNNEL
	tristate "IPv6: IP-in-IPv6 tunnel (RFC2473)"
	select INET6_TUNNEL
	select DST_CACHE
	---help---
	  Support for IPv6-in-IPv6 and IPv4-in-IPv6 tunnels described in
	  RFC 2473.

	  If unsure, say N.

config IPV6_GRE
	tristate "IPv6: GRE tunnel"
	select IPV6_TUNNEL
	select NET_IP_TUNNEL
	depends on NET_IPGRE_DEMUX
	---help---
	  Tunneling means encapsulating data of one protocol type within
	  another protocol and sending it over a channel that understands the
	  encapsulating protocol. This particular tunneling driver implements
	  GRE (Generic Routing Encapsulation) and at this time allows
	  encapsulating of IPv4 or IPv6 over existing IPv6 infrastructure.
	  This driver is useful if the other endpoint is a Cisco router: Cisco
	  likes GRE much better than the other Linux tunneling driver ("IP
	  tunneling" above). In addition, GRE allows multicast redistribution
	  through the tunnel.

	  Saying M here will produce a module called ip6_gre. If unsure, say N.

config IPV6_FOU
	tristate
	default NET_FOU && IPV6

config IPV6_FOU_TUNNEL
	tristate
	default NET_FOU_IP_TUNNELS && IPV6_FOU
	select IPV6_TUNNEL

config IPV6_MULTIPLE_TABLES
	bool "IPv6: Multiple Routing Tables"
	select FIB_RULES
	---help---
	  Support multiple routing tables.

config IPV6_SUBTREES
	bool "IPv6: source address based routing"
	depends on IPV6_MULTIPLE_TABLES
	---help---
	  Enable routing by source address or prefix.

	  The destination address is still the primary routing key, so mixing
	  normal and source prefix specific routes in the same routing table
	  may sometimes lead to unintended routing behavior.  This can be
	  avoided by defining different routing tables for the normal and
	  source prefix specific routes.

	  If unsure, say N.

config IPV6_MROUTE
	bool "IPv6: multicast routing"
	depends on IPV6
	---help---
	  Experimental support for IPv6 multicast forwarding.
	  If unsure, say N.

config IPV6_MROUTE_MULTIPLE_TABLES
	bool "IPv6: multicast policy routing"
	depends on IPV6_MROUTE
	select FIB_RULES
	help
	  Normally, a multicast router runs a userspace daemon and decides
	  what to do with a multicast packet based on the source and
	  destination addresses. If you say Y here, the multicast router
	  will also be able to take interfaces and packet marks into
	  account and run multiple instances of userspace daemons
	  simultaneously, each one handling a single table.

	  If unsure, say N.

config IPV6_PIMSM_V2
	bool "IPv6: PIM-SM version 2 support"
	depends on IPV6_MROUTE
	---help---
	  Support for IPv6 PIM multicast routing protocol PIM-SMv2.
	  If unsure, say N.

config IPV6_SEG6_LWTUNNEL
	bool "IPv6: Segment Routing Header encapsulation support"
	depends on IPV6
	select LWTUNNEL
	---help---
	  Support for encapsulation of packets within an outer IPv6
	  header and a Segment Routing Header using the lightweight
	  tunnels mechanism.

	  If unsure, say N.

config IPV6_SEG6_INLINE
	bool "IPv6: direct Segment Routing Header insertion "
	depends on IPV6_SEG6_LWTUNNEL
	---help---
	  Support for direct insertion of the Segment Routing Header,
	  also known as inline mode. Be aware that direct insertion of
	  extension headers (as opposed to encapsulation) may break
	  multiple mechanisms such as PMTUD or IPSec AH. Use this feature
	  only if you know exactly what you are doing.

	  If unsure, say N.

config IPV6_SEG6_HMAC
	bool "IPv6: Segment Routing HMAC support"
	depends on IPV6
	select CRYPTO_HMAC
	select CRYPTO_SHA1
	select CRYPTO_SHA256
	---help---
	  Support for HMAC signature generation and verification
	  of SR-enabled packets.

	  If unsure, say N.

endif # IPV6
Commit	Line	Data
1da177e4 LT	1	#
1da177e4 LT	2	# IPv6 configuration
6a2e9b73 SR	3	#
	4
	5	# IPv6 as module will cause a CRASH if you try to unload it
0b18542b	6	menuconfig IPV6
6a2e9b73	7	tristate "The IPv6 protocol"
de551f2e	8	default y
6a2e9b73	9	---help---
de551f2e	10	Support for IP version 6 (IPv6).
6a2e9b73 SR	11
6a2e9b73 SR	12	For general information about IPv6, see
242260fb	13	<https://en.wikipedia.org/wiki/IPv6>.
de551f2e TH	14	For specific information about IPv6 under Linux, see
	15	Documentation/networking/ipv6.txt and read the HOWTO at
	16	<http://www.tldp.org/HOWTO/Linux+IPv6-HOWTO/>
6a2e9b73 SR	17
	18	To compile this protocol support as a module, choose M here: the
	19	module will be called ipv6.
	20
0b18542b JE	21	if IPV6
0b18542b JE	22
ebacaaa0 YH	23	config IPV6_ROUTER_PREF
ebacaaa0 YH	24	bool "IPv6: Router Preference (RFC 4191) support"
ebacaaa0 YH	25	---help---
ebacaaa0 YH	26	Router Preference is an optional extension to the Router
692105b8 ML	27	Advertisement message which improves the ability of hosts
	28	to pick an appropriate router, especially when the hosts
	29	are placed in a multi-homed network.
ebacaaa0 YH	30
	31	If unsure, say N.
	32
70ceb4f5	33	config IPV6_ROUTE_INFO
f9ceb16e KC	34	bool "IPv6: Route Information (RFC 4191) support"
f9ceb16e KC	35	depends on IPV6_ROUTER_PREF
70ceb4f5 YH	36	---help---
	37	This is experimental support of Route Information.
	38
	39	If unsure, say N.
	40
95c385b4	41	config IPV6_OPTIMISTIC_DAD
f9ceb16e	42	bool "IPv6: Enable RFC 4429 Optimistic DAD"
95c385b4 NH	43	---help---
	44	This is experimental support for optimistic Duplicate
	45	Address Detection. It allows for autoconfigured addresses
	46	to be used more quickly.
	47
	48	If unsure, say N.
	49
1da177e4 LT	50	config INET6_AH
1da177e4 LT	51	tristate "IPv6: AH transformation"
7e152524	52	select XFRM_ALGO
1da177e4 LT	53	select CRYPTO
	54	select CRYPTO_HMAC
	55	select CRYPTO_MD5
	56	select CRYPTO_SHA1
	57	---help---
	58	Support for IPsec AH.
	59
	60	If unsure, say Y.
	61
	62	config INET6_ESP
	63	tristate "IPv6: ESP transformation"
7e152524	64	select XFRM_ALGO
1da177e4	65	select CRYPTO
ed58dd41	66	select CRYPTO_AUTHENC
1da177e4 LT	67	select CRYPTO_HMAC
1da177e4 LT	68	select CRYPTO_MD5
6b7326c8	69	select CRYPTO_CBC
1da177e4 LT	70	select CRYPTO_SHA1
1da177e4 LT	71	select CRYPTO_DES
32b6170c	72	select CRYPTO_ECHAINIV
1da177e4 LT	73	---help---
	74	Support for IPsec ESP.
	75
	76	If unsure, say Y.
	77
	78	config INET6_IPCOMP
	79	tristate "IPv6: IPComp transformation"
d2acc347	80	select INET6_XFRM_TUNNEL
6fccab67	81	select XFRM_IPCOMP
1da177e4 LT	82	---help---
	83	Support for IP Payload Compression Protocol (IPComp) (RFC3173),
	84	typically needed for IPsec.
	85
	86	If unsure, say Y.
	87
ee538268	88	config IPV6_MIP6
f9ceb16e	89	tristate "IPv6: Mobility"
ee538268 MN	90	select XFRM
	91	---help---
	92	Support for IPv6 Mobility described in RFC 3775.
	93
	94	If unsure, say N.
	95
65d7ab8d TH	96	config IPV6_ILA
65d7ab8d TH	97	tristate "IPv6: Identifier Locator Addressing (ILA)"
8cb964da	98	depends on NETFILTER
65d7ab8d TH	99	select LWTUNNEL
	100	---help---
	101	Support for IPv6 Identifier Locator Addressing (ILA).
	102
	103	ILA is a mechanism to do network virtualization without
	104	encapsulation. The basic concept of ILA is that we split an
	105	IPv6 address into a 64 bit locator and 64 bit identifier. The
	106	identifier is the identity of an entity in communication
	107	("who") and the locator expresses the location of the
	108	entity ("where").
	109
	110	ILA can be configured using the "encap ila" option with
	111	"ip -6 route" command. ILA is described in
	112	https://tools.ietf.org/html/draft-herbert-nvo3-ila-00.
	113
	114	If unsure, say N.
	115
d2acc347 HX	116	config INET6_XFRM_TUNNEL
	117	tristate
	118	select INET6_TUNNEL
	119	default n
	120
1da177e4	121	config INET6_TUNNEL
d2acc347 HX	122	tristate
d2acc347 HX	123	default n
1da177e4	124
b59f45d0 HX	125	config INET6_XFRM_MODE_TRANSPORT
b59f45d0 HX	126	tristate "IPv6: IPsec transport mode"
b59f45d0 HX	127	default IPV6
	128	select XFRM
	129	---help---
	130	Support for IPsec transport mode.
	131
	132	If unsure, say Y.
	133
	134	config INET6_XFRM_MODE_TUNNEL
	135	tristate "IPv6: IPsec tunnel mode"
b59f45d0 HX	136	default IPV6
	137	select XFRM
	138	---help---
	139	Support for IPsec tunnel mode.
	140
	141	If unsure, say Y.
	142
0a69452c DB	143	config INET6_XFRM_MODE_BEET
0a69452c DB	144	tristate "IPv6: IPsec BEET mode"
0a69452c DB	145	default IPV6
	146	select XFRM
	147	---help---
	148	Support for IPsec BEET mode.
	149
	150	If unsure, say Y.
	151
1d71627d	152	config INET6_XFRM_MODE_ROUTEOPTIMIZATION
f9ceb16e	153	tristate "IPv6: MIPv6 route optimization mode"
1d71627d MN	154	select XFRM
	155	---help---
	156	Support for MIPv6 route optimization mode.
	157
ed1efb2a SK	158	config IPV6_VTI
	159	tristate "Virtual (secure) IPv6: tunneling"
	160	select IPV6_TUNNEL
876fc03a	161	select NET_IP_TUNNEL
ed1efb2a SK	162	depends on INET6_XFRM_MODE_TUNNEL
	163	---help---
	164	Tunneling means encapsulating data of one protocol type within
	165	another protocol and sending it over a channel that understands the
	166	encapsulating protocol. This can be used with xfrm mode tunnel to give
	167	the notion of a secure tunnel for IPSEC and then use routing protocol
	168	on top.
	169
989e5b96 JR	170	config IPV6_SIT
989e5b96 JR	171	tristate "IPv6: IPv6-in-IPv4 tunnel (SIT driver)"
c73cb5a2	172	select INET_TUNNEL
f61dd388	173	select NET_IP_TUNNEL
de357cc0	174	select IPV6_NDISC_NODETYPE
989e5b96 JR	175	default y
	176	---help---
	177	Tunneling means encapsulating data of one protocol type within
	178	another protocol and sending it over a channel that understands the
	179	encapsulating protocol. This driver implements encapsulation of IPv6
5c5d6dab	180	into IPv4 packets. This is useful if you want to connect two IPv6
989e5b96 JR	181	networks over an IPv4-only path.
989e5b96 JR	182
4737f097	183	Saying M here will produce a module called sit. If unsure, say Y.
989e5b96	184
fa857afc	185	config IPV6_SIT_6RD
f9ceb16e KC	186	bool "IPv6: IPv6 Rapid Deployment (6RD)"
f9ceb16e KC	187	depends on IPV6_SIT
fa857afc YH	188	default n
	189	---help---
	190	IPv6 Rapid Deployment (6rd; draft-ietf-softwire-ipv6-6rd) builds upon
	191	mechanisms of 6to4 (RFC3056) to enable a service provider to rapidly
	192	deploy IPv6 unicast service to IPv4 sites to which it provides
	193	customer premise equipment. Like 6to4, it utilizes stateless IPv6 in
	194	IPv4 encapsulation in order to transit IPv4-only network
	195	infrastructure. Unlike 6to4, a 6rd service provider uses an IPv6
	196	prefix of its own in place of the fixed 6to4 prefix.
	197
	198	With this option enabled, the SIT driver offers 6rd functionality by
	199	providing additional ioctl API to configure the IPv6 Prefix for in
	200	stead of static 2002::/16 for 6to4.
	201
	202	If unsure, say N.
	203
de357cc0 YH	204	config IPV6_NDISC_NODETYPE
	205	bool
	206
1da177e4	207	config IPV6_TUNNEL
38fe999e	208	tristate "IPv6: IP-in-IPv6 tunnel (RFC2473)"
d2acc347	209	select INET6_TUNNEL
607f725f	210	select DST_CACHE
1da177e4	211	---help---
38fe999e YH	212	Support for IPv6-in-IPv6 and IPv4-in-IPv6 tunnels described in
38fe999e YH	213	RFC 2473.
1da177e4 LT	214
	215	If unsure, say N.
	216
c12b395a	217	config IPV6_GRE
	218	tristate "IPv6: GRE tunnel"
	219	select IPV6_TUNNEL
f61dd388	220	select NET_IP_TUNNEL
8bf42e9e	221	depends on NET_IPGRE_DEMUX
c12b395a	222	---help---
	223	Tunneling means encapsulating data of one protocol type within
	224	another protocol and sending it over a channel that understands the
	225	encapsulating protocol. This particular tunneling driver implements
	226	GRE (Generic Routing Encapsulation) and at this time allows
	227	encapsulating of IPv4 or IPv6 over existing IPv6 infrastructure.
	228	This driver is useful if the other endpoint is a Cisco router: Cisco
	229	likes GRE much better than the other Linux tunneling driver ("IP
	230	tunneling" above). In addition, GRE allows multicast redistribution
	231	through the tunnel.
	232
	233	Saying M here will produce a module called ip6_gre. If unsure, say N.
	234
fabb13db AB	235	config IPV6_FOU
	236	tristate
	237	default NET_FOU && IPV6
	238
	239	config IPV6_FOU_TUNNEL
	240	tristate
	241	default NET_FOU_IP_TUNNELS && IPV6_FOU
95e4daa8	242	select IPV6_TUNNEL
fabb13db	243
264e91b6 VN	244	config IPV6_MULTIPLE_TABLES
264e91b6 VN	245	bool "IPv6: Multiple Routing Tables"
264e91b6 VN	246	select FIB_RULES
	247	---help---
	248	Support multiple routing tables.
	249
4e96c2b4 YH	250	config IPV6_SUBTREES
4e96c2b4 YH	251	bool "IPv6: source address based routing"
264e91b6	252	depends on IPV6_MULTIPLE_TABLES
4e96c2b4 YH	253	---help---
	254	Enable routing by source address or prefix.
	255
	256	The destination address is still the primary routing key, so mixing
	257	normal and source prefix specific routes in the same routing table
	258	may sometimes lead to unintended routing behavior. This can be
	259	avoided by defining different routing tables for the normal and
	260	source prefix specific routes.
	261
	262	If unsure, say N.
	263
7bc570c8	264	config IPV6_MROUTE
f9ceb16e KC	265	bool "IPv6: multicast routing"
f9ceb16e KC	266	depends on IPV6
7bc570c8 YH	267	---help---
	268	Experimental support for IPv6 multicast forwarding.
	269	If unsure, say N.
	270
d1db275d PM	271	config IPV6_MROUTE_MULTIPLE_TABLES
	272	bool "IPv6: multicast policy routing"
	273	depends on IPV6_MROUTE
	274	select FIB_RULES
	275	help
	276	Normally, a multicast router runs a userspace daemon and decides
	277	what to do with a multicast packet based on the source and
	278	destination addresses. If you say Y here, the multicast router
	279	will also be able to take interfaces and packet marks into
	280	account and run multiple instances of userspace daemons
	281	simultaneously, each one handling a single table.
	282
	283	If unsure, say N.
	284
14fb64e1	285	config IPV6_PIMSM_V2
f9ceb16e	286	bool "IPv6: PIM-SM version 2 support"
14fb64e1 YH	287	depends on IPV6_MROUTE
	288	---help---
	289	Support for IPv6 PIM multicast routing protocol PIM-SMv2.
	290	If unsure, say N.
	291
46738b13 DL	292	config IPV6_SEG6_LWTUNNEL
	293	bool "IPv6: Segment Routing Header encapsulation support"
	294	depends on IPV6
	295	select LWTUNNEL
	296	---help---
	297	Support for encapsulation of packets within an outer IPv6
	298	header and a Segment Routing Header using the lightweight
	299	tunnels mechanism.
	300
	301	If unsure, say N.
	302
6c8702c6 DL	303	config IPV6_SEG6_INLINE
6c8702c6 DL	304	bool "IPv6: direct Segment Routing Header insertion "
46738b13	305	depends on IPV6_SEG6_LWTUNNEL
6c8702c6 DL	306	---help---
	307	Support for direct insertion of the Segment Routing Header,
	308	also known as inline mode. Be aware that direct insertion of
	309	extension headers (as opposed to encapsulation) may break
	310	multiple mechanisms such as PMTUD or IPSec AH. Use this feature
	311	only if you know exactly what you are doing.
	312
	313	If unsure, say N.
	314
bf355b8d DL	315	config IPV6_SEG6_HMAC
	316	bool "IPv6: Segment Routing HMAC support"
	317	depends on IPV6
	318	select CRYPTO_HMAC
	319	select CRYPTO_SHA1
	320	select CRYPTO_SHA256
	321	---help---
	322	Support for HMAC signature generation and verification
	323	of SR-enabled packets.
	324
	325	If unsure, say N.
	326
0b18542b	327	endif # IPV6