]>
Commit | Line | Data |
---|---|---|
ec8f24b7 | 1 | # SPDX-License-Identifier: GPL-2.0-only |
1da177e4 LT |
2 | # |
3 | # XFRM configuration | |
4 | # | |
6a2e9b73 | 5 | config XFRM |
43da1411 KK |
6 | bool |
7 | depends on INET | |
8 | select GRO_CELLS | |
9 | select SKB_EXTENSIONS | |
6a2e9b73 | 10 | |
25393d3f | 11 | config XFRM_OFFLOAD |
43da1411 | 12 | bool |
25393d3f | 13 | |
7e152524 JB |
14 | config XFRM_ALGO |
15 | tristate | |
16 | select XFRM | |
17 | select CRYPTO | |
597179b0 | 18 | select CRYPTO_HASH |
b95bba5d | 19 | select CRYPTO_SKCIPHER |
7e152524 | 20 | |
e54d1527 | 21 | if INET |
1da177e4 | 22 | config XFRM_USER |
654b32c6 | 23 | tristate "Transformation user configuration interface" |
7e152524 | 24 | select XFRM_ALGO |
a7f7f624 | 25 | help |
654b32c6 MN |
26 | Support for Transformation(XFRM) user configuration interface |
27 | like IPsec used by native Linux tools. | |
1da177e4 LT |
28 | |
29 | If unsure, say Y. | |
30 | ||
f203b76d SK |
31 | config XFRM_INTERFACE |
32 | tristate "Transformation virtual interface" | |
33 | depends on XFRM && IPV6 | |
a7f7f624 | 34 | help |
f203b76d SK |
35 | This provides a virtual interface to route IPsec traffic. |
36 | ||
37 | If unsure, say N. | |
38 | ||
c11f1a15 | 39 | config XFRM_SUB_POLICY |
f215bf48 KC |
40 | bool "Transformation sub policy support" |
41 | depends on XFRM | |
a7f7f624 | 42 | help |
c11f1a15 MN |
43 | Support sub policy for developers. By using sub policy with main |
44 | one, two policies can be applied to the same packet at once. | |
45 | Policy which lives shorter time in kernel should be a sub. | |
46 | ||
47 | If unsure, say N. | |
48 | ||
d0473655 | 49 | config XFRM_MIGRATE |
f215bf48 KC |
50 | bool "Transformation migrate database" |
51 | depends on XFRM | |
a7f7f624 | 52 | help |
d0473655 SS |
53 | A feature to update locator(s) of a given IPsec security |
54 | association dynamically. This feature is required, for | |
55 | instance, in a Mobile IPv6 environment with IPsec configuration | |
56 | where mobile nodes change their attachment point to the Internet. | |
57 | ||
58 | If unsure, say N. | |
59 | ||
8ea84349 | 60 | config XFRM_STATISTICS |
f215bf48 | 61 | bool "Transformation statistics" |
e54d1527 | 62 | depends on XFRM && PROC_FS |
a7f7f624 | 63 | help |
8ea84349 MN |
64 | This statistics is not a SNMP/MIB specification but shows |
65 | statistics about transformation error (or almost error) factor | |
66 | at packet processing for developer. | |
67 | ||
68 | If unsure, say N. | |
69 | ||
6fccab67 HX |
70 | config XFRM_IPCOMP |
71 | tristate | |
7e152524 | 72 | select XFRM_ALGO |
6fccab67 HX |
73 | select CRYPTO |
74 | select CRYPTO_DEFLATE | |
75 | ||
6a2e9b73 SR |
76 | config NET_KEY |
77 | tristate "PF_KEY sockets" | |
7e152524 | 78 | select XFRM_ALGO |
a7f7f624 | 79 | help |
6a2e9b73 SR |
80 | PF_KEYv2 socket family, compatible to KAME ones. |
81 | They are required if you are going to use IPsec tools ported | |
82 | from KAME. | |
83 | ||
84 | Say Y unless you know what you are doing. | |
85 | ||
f6ed0ec0 | 86 | config NET_KEY_MIGRATE |
f215bf48 KC |
87 | bool "PF_KEY MIGRATE" |
88 | depends on NET_KEY | |
f6ed0ec0 | 89 | select XFRM_MIGRATE |
a7f7f624 | 90 | help |
f6ed0ec0 SS |
91 | Add a PF_KEY MIGRATE message to PF_KEYv2 socket family. |
92 | The PF_KEY MIGRATE message is used to dynamically update | |
93 | locator(s) of a given IPsec security association. | |
94 | This feature is required, for instance, in a Mobile IPv6 | |
95 | environment with IPsec configuration where mobile nodes | |
96 | change their attachment point to the Internet. Detail | |
97 | information can be found in the internet-draft | |
98 | <draft-sugimoto-mip6-pfkey-migrate>. | |
99 | ||
100 | If unsure, say N. | |
e54d1527 | 101 | |
26333c37 SD |
102 | config XFRM_ESPINTCP |
103 | bool | |
104 | ||
e54d1527 | 105 | endif # INET |