Merge tag 'io_uring-6.16-20250630' of git://git.kernel.dk/linux
[linux-2.6-block.git] / net / sched / Kconfig
CommitLineData
ec8f24b7 1# SPDX-License-Identifier: GPL-2.0-only
1da177e4
LT
2#
3# Traffic control configuration.
50f699b1 4#
6a2e9b73 5
85ef3e5c 6menuconfig NET_SCHED
6a2e9b73 7 bool "QoS and/or fair queueing"
3c62f75a 8 select NET_SCH_FIFO
a7f7f624 9 help
6a2e9b73
SR
10 When the kernel has several packets to send out over a network
11 device, it has to decide which ones to send first, which ones to
52ab4ac2
TG
12 delay, and which ones to drop. This is the job of the queueing
13 disciplines, several different algorithms for how to do this
6a2e9b73
SR
14 "fairly" have been proposed.
15
16 If you say N here, you will get the standard packet scheduler, which
17 is a FIFO (first come, first served). If you say Y here, you will be
18 able to choose from among several alternative algorithms which can
19 then be attached to different network devices. This is useful for
20 example if some of your network devices are real time devices that
21 need a certain minimum data flow rate, or if you need to limit the
22 maximum data flow rate for traffic which matches specified criteria.
23 This code is considered to be experimental.
24
25 To administer these schedulers, you'll need the user-level utilities
5d330cdd
AS
26 from the package iproute2+tc at
27 <https://www.kernel.org/pub/linux/utils/net/iproute2/>. That package
28 also contains some documentation; for more, check out
c996d8b9 29 <http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2>.
6a2e9b73
SR
30
31 This Quality of Service (QoS) support will enable you to use
32 Differentiated Services (diffserv) and Resource Reservation Protocol
52ab4ac2
TG
33 (RSVP) on your Linux router if you also say Y to the corresponding
34 classifiers below. Documentation and software is at
35 <http://diffserv.sourceforge.net/>.
6a2e9b73
SR
36
37 If you say Y here and to "/proc file system" below, you will be able
38 to read status information about packet schedulers from the file
39 /proc/net/psched.
40
41 The available schedulers are listed in the following questions; you
42 can say Y to as many as you like. If unsure, say N now.
43
05b8b0fa
RZ
44if NET_SCHED
45
52ab4ac2 46comment "Queueing/Scheduling"
52ab4ac2 47
1da177e4 48config NET_SCH_HTB
52ab4ac2 49 tristate "Hierarchical Token Bucket (HTB)"
a7f7f624 50 help
1da177e4 51 Say Y here if you want to use the Hierarchical Token Buckets (HTB)
52ab4ac2 52 packet scheduling algorithm. See
1da177e4
LT
53 <http://luxik.cdi.cz/~devik/qos/htb/> for complete manual and
54 in-depth articles.
55
52ab4ac2 56 HTB is very similar to CBQ regarding its goals however is has
1da177e4
LT
57 different properties and different algorithm.
58
59 To compile this code as a module, choose M here: the
60 module will be called sch_htb.
61
62config NET_SCH_HFSC
52ab4ac2 63 tristate "Hierarchical Fair Service Curve (HFSC)"
a7f7f624 64 help
1da177e4 65 Say Y here if you want to use the Hierarchical Fair Service Curve
52ab4ac2 66 (HFSC) packet scheduling algorithm.
1da177e4
LT
67
68 To compile this code as a module, choose M here: the
69 module will be called sch_hfsc.
70
1da177e4 71config NET_SCH_PRIO
52ab4ac2 72 tristate "Multi Band Priority Queueing (PRIO)"
a7f7f624 73 help
1da177e4 74 Say Y here if you want to use an n-band priority queue packet
52ab4ac2 75 scheduler.
1da177e4
LT
76
77 To compile this code as a module, choose M here: the
78 module will be called sch_prio.
79
92651940
AD
80config NET_SCH_MULTIQ
81 tristate "Hardware Multiqueue-aware Multi Band Queuing (MULTIQ)"
a7f7f624 82 help
92651940
AD
83 Say Y here if you want to use an n-band queue packet scheduler
84 to support devices that have multiple hardware transmit queues.
85
86 To compile this code as a module, choose M here: the
87 module will be called sch_multiq.
88
1da177e4 89config NET_SCH_RED
52ab4ac2 90 tristate "Random Early Detection (RED)"
a7f7f624 91 help
1da177e4 92 Say Y here if you want to use the Random Early Detection (RED)
52ab4ac2
TG
93 packet scheduling algorithm.
94
95 See the top of <file:net/sched/sch_red.c> for more details.
1da177e4
LT
96
97 To compile this code as a module, choose M here: the
98 module will be called sch_red.
99
e13e02a3
ED
100config NET_SCH_SFB
101 tristate "Stochastic Fair Blue (SFB)"
a7f7f624 102 help
e13e02a3
ED
103 Say Y here if you want to use the Stochastic Fair Blue (SFB)
104 packet scheduling algorithm.
105
106 See the top of <file:net/sched/sch_sfb.c> for more details.
107
108 To compile this code as a module, choose M here: the
109 module will be called sch_sfb.
110
1da177e4 111config NET_SCH_SFQ
52ab4ac2 112 tristate "Stochastic Fairness Queueing (SFQ)"
a7f7f624 113 help
1da177e4 114 Say Y here if you want to use the Stochastic Fairness Queueing (SFQ)
99acaeb9 115 packet scheduling algorithm.
52ab4ac2
TG
116
117 See the top of <file:net/sched/sch_sfq.c> for more details.
1da177e4
LT
118
119 To compile this code as a module, choose M here: the
120 module will be called sch_sfq.
121
122config NET_SCH_TEQL
52ab4ac2 123 tristate "True Link Equalizer (TEQL)"
a7f7f624 124 help
1da177e4 125 Say Y here if you want to use the True Link Equalizer (TLE) packet
52ab4ac2
TG
126 scheduling algorithm. This queueing discipline allows the combination
127 of several physical devices into one virtual device.
128
129 See the top of <file:net/sched/sch_teql.c> for more details.
1da177e4
LT
130
131 To compile this code as a module, choose M here: the
132 module will be called sch_teql.
133
134config NET_SCH_TBF
52ab4ac2 135 tristate "Token Bucket Filter (TBF)"
a7f7f624 136 help
52ab4ac2
TG
137 Say Y here if you want to use the Token Bucket Filter (TBF) packet
138 scheduling algorithm.
139
140 See the top of <file:net/sched/sch_tbf.c> for more details.
1da177e4
LT
141
142 To compile this code as a module, choose M here: the
143 module will be called sch_tbf.
144
585d763a
VCG
145config NET_SCH_CBS
146 tristate "Credit Based Shaper (CBS)"
a7f7f624 147 help
585d763a
VCG
148 Say Y here if you want to use the Credit Based Shaper (CBS) packet
149 scheduling algorithm.
150
151 See the top of <file:net/sched/sch_cbs.c> for more details.
152
153 To compile this code as a module, choose M here: the
154 module will be called sch_cbs.
25db26a9
VCG
155
156config NET_SCH_ETF
157 tristate "Earliest TxTime First (ETF)"
158 help
159 Say Y here if you want to use the Earliest TxTime First (ETF) packet
160 scheduling algorithm.
161
162 See the top of <file:net/sched/sch_etf.c> for more details.
163
164 To compile this code as a module, choose M here: the
165 module will be called sch_etf.
585d763a 166
1dfe086d
VO
167config NET_SCH_MQPRIO_LIB
168 tristate
169 help
170 Common library for manipulating mqprio queue configurations.
171
5a781ccb
VCG
172config NET_SCH_TAPRIO
173 tristate "Time Aware Priority (taprio) Scheduler"
1dfe086d 174 select NET_SCH_MQPRIO_LIB
5a781ccb
VCG
175 help
176 Say Y here if you want to use the Time Aware Priority (taprio) packet
177 scheduling algorithm.
178
179 See the top of <file:net/sched/sch_taprio.c> for more details.
180
181 To compile this code as a module, choose M here: the
182 module will be called sch_taprio.
183
1da177e4 184config NET_SCH_GRED
52ab4ac2 185 tristate "Generic Random Early Detection (GRED)"
a7f7f624 186 help
1da177e4 187 Say Y here if you want to use the Generic Random Early Detection
20cc6bef 188 (GRED) packet scheduling algorithm for some of your network devices
1da177e4
LT
189 (see the top of <file:net/sched/sch_red.c> for details and
190 references about the algorithm).
191
192 To compile this code as a module, choose M here: the
193 module will be called sch_gred.
194
1da177e4 195config NET_SCH_NETEM
52ab4ac2 196 tristate "Network emulator (NETEM)"
a7f7f624 197 help
1da177e4
LT
198 Say Y if you want to emulate network delay, loss, and packet
199 re-ordering. This is often useful to simulate networks when
200 testing applications or protocols.
201
202 To compile this driver as a module, choose M here: the module
203 will be called sch_netem.
204
205 If unsure, say N.
206
13d2a1d2
PM
207config NET_SCH_DRR
208 tristate "Deficit Round Robin scheduler (DRR)"
209 help
210 Say Y here if you want to use the Deficit Round Robin (DRR) packet
211 scheduling algorithm.
212
213 To compile this driver as a module, choose M here: the module
214 will be called sch_drr.
215
216 If unsure, say N.
217
b8970f0b
JF
218config NET_SCH_MQPRIO
219 tristate "Multi-queue priority scheduler (MQPRIO)"
1dfe086d 220 select NET_SCH_MQPRIO_LIB
b8970f0b
JF
221 help
222 Say Y here if you want to use the Multi-queue Priority scheduler.
223 This scheduler allows QOS to be offloaded on NICs that have support
224 for offloading QOS schedulers.
225
226 To compile this driver as a module, choose M here: the module will
227 be called sch_mqprio.
228
229 If unsure, say N.
230
aea5f654
ND
231config NET_SCH_SKBPRIO
232 tristate "SKB priority queue scheduler (SKBPRIO)"
233 help
234 Say Y here if you want to use the SKB priority queue
235 scheduler. This schedules packets according to skb->priority,
236 which is useful for request packets in DoS mitigation systems such
237 as Gatekeeper.
238
239 To compile this driver as a module, choose M here: the module will
240 be called sch_skbprio.
241
242 If unsure, say N.
243
45e14433 244config NET_SCH_CHOKE
245 tristate "CHOose and Keep responsive flow scheduler (CHOKE)"
246 help
247 Say Y here if you want to use the CHOKe packet scheduler (CHOose
248 and Keep for responsive flows, CHOose and Kill for unresponsive
8354bcbe 249 flows). This is a variation of RED which tries to penalize flows
45e14433 250 that monopolize the queue.
251
252 To compile this code as a module, choose M here: the
253 module will be called sch_choke.
254
0545a303 255config NET_SCH_QFQ
256 tristate "Quick Fair Queueing scheduler (QFQ)"
257 help
258 Say Y here if you want to use the Quick Fair Queueing Scheduler (QFQ)
259 packet scheduling algorithm.
260
261 To compile this driver as a module, choose M here: the module
262 will be called sch_qfq.
263
264 If unsure, say N.
265
76e3cc12
ED
266config NET_SCH_CODEL
267 tristate "Controlled Delay AQM (CODEL)"
268 help
269 Say Y here if you want to use the Controlled Delay (CODEL)
270 packet scheduling algorithm.
271
272 To compile this driver as a module, choose M here: the module
273 will be called sch_codel.
274
275 If unsure, say N.
276
4b549a2e
ED
277config NET_SCH_FQ_CODEL
278 tristate "Fair Queue Controlled Delay AQM (FQ_CODEL)"
279 help
280 Say Y here if you want to use the FQ Controlled Delay (FQ_CODEL)
281 packet scheduling algorithm.
282
283 To compile this driver as a module, choose M here: the module
284 will be called sch_fq_codel.
285
286 If unsure, say N.
287
046f6fd5
THJ
288config NET_SCH_CAKE
289 tristate "Common Applications Kept Enhanced (CAKE)"
290 help
291 Say Y here if you want to use the Common Applications Kept Enhanced
bf69abad 292 (CAKE) queue management algorithm.
046f6fd5
THJ
293
294 To compile this driver as a module, choose M here: the module
295 will be called sch_cake.
296
297 If unsure, say N.
298
afe4fd06
ED
299config NET_SCH_FQ
300 tristate "Fair Queue"
301 help
302 Say Y here if you want to use the FQ packet scheduling algorithm.
303
304 FQ does flow separation, and is able to respect pacing requirements
6a7a2c18 305 set by TCP stack into sk->sk_pacing_rate (for locally generated
afe4fd06
ED
306 traffic)
307
308 To compile this driver as a module, choose M here: the module
309 will be called sch_fq.
310
311 If unsure, say N.
312
10239edf
TL
313config NET_SCH_HHF
314 tristate "Heavy-Hitter Filter (HHF)"
315 help
316 Say Y here if you want to use the Heavy-Hitter Filter (HHF)
317 packet scheduling algorithm.
318
319 To compile this driver as a module, choose M here: the module
320 will be called sch_hhf.
321
d4b36210
VS
322config NET_SCH_PIE
323 tristate "Proportional Integral controller Enhanced (PIE) scheduler"
324 help
325 Say Y here if you want to use the Proportional Integral controller
326 Enhanced scheduler packet scheduling algorithm.
1f8389bf 327 For more information, please see https://tools.ietf.org/html/rfc8033
d4b36210
VS
328
329 To compile this driver as a module, choose M here: the module
330 will be called sch_pie.
331
332 If unsure, say N.
333
ec97ecf1
MT
334config NET_SCH_FQ_PIE
335 depends on NET_SCH_PIE
336 tristate "Flow Queue Proportional Integral controller Enhanced (FQ-PIE)"
337 help
338 Say Y here if you want to use the Flow Queue Proportional Integral
339 controller Enhanced (FQ-PIE) packet scheduling algorithm.
340 For more information, please see https://tools.ietf.org/html/rfc8033
341
342 To compile this driver as a module, choose M here: the module
343 will be called sch_fq_pie.
344
345 If unsure, say N.
346
1da177e4 347config NET_SCH_INGRESS
1f211a1b 348 tristate "Ingress/classifier-action Qdisc"
72eb7bd2 349 depends on NET_CLS_ACT
e420bed0 350 select NET_XGRESS
a7f7f624 351 help
1f211a1b
DB
352 Say Y here if you want to use classifiers for incoming and/or outgoing
353 packets. This qdisc doesn't do anything else besides running classifiers,
354 which can also have actions attached to them. In case of outgoing packets,
355 classifiers that this qdisc holds are executed in the transmit path
356 before real enqueuing to an egress qdisc happens.
357
1da177e4
LT
358 If unsure, say Y.
359
1f211a1b
DB
360 To compile this code as a module, choose M here: the module will be
361 called sch_ingress with alias of sch_clsact.
1da177e4 362
c3059be1
SR
363config NET_SCH_PLUG
364 tristate "Plug network traffic until release (PLUG)"
a7f7f624 365 help
c3059be1
SR
366
367 This queuing discipline allows userspace to plug/unplug a network
368 output queue, using the netlink interface. When it receives an
369 enqueue command it inserts a plug into the outbound queue that
370 causes following packets to enqueue until a dequeue command arrives
371 over netlink, causing the plug to be removed and resuming the normal
372 packet flow.
373
374 This module also provides a generic "network output buffering"
375 functionality (aka output commit), wherein upon arrival of a dequeue
376 command, only packets up to the first plug are released for delivery.
377 The Remus HA project uses this module to enable speculative execution
378 of virtual machines by allowing the generated network output to be rolled
379 back if needed.
380
5d330cdd 381 For more information, please refer to <http://wiki.xenproject.org/wiki/Remus>
c3059be1
SR
382
383 Say Y here if you are using this kernel for Xen dom0 and
384 want to protect Xen guests with Remus.
385
386 To compile this code as a module, choose M here: the
387 module will be called sch_plug.
388
dcc68b4d
PM
389config NET_SCH_ETS
390 tristate "Enhanced transmission selection scheduler (ETS)"
391 help
392 The Enhanced Transmission Selection scheduler is a classful
393 queuing discipline that merges functionality of PRIO and DRR
394 qdiscs in one scheduler. ETS makes it easy to configure a set of
395 strict and bandwidth-sharing bands to implement the transmission
396 selection described in 802.1Qaz.
397
398 Say Y here if you want to use the ETS packet scheduling
399 algorithm.
400
401 To compile this driver as a module, choose M here: the module
402 will be called sch_ets.
403
404 If unsure, say N.
405
c8240344
AH
406config NET_SCH_BPF
407 bool "BPF-based Qdisc"
408 depends on BPF_SYSCALL && BPF_JIT && DEBUG_INFO_BTF
409 help
410 This option allows BPF-based queueing disiplines. With BPF struct_ops,
411 users can implement supported operators in Qdisc_ops using BPF programs.
412 The queue holding skb can be built with BPF maps or graphs.
413
414 Say Y here if you want to use BPF-based Qdisc.
415
416 If unsure, say N.
417
8ea3e439 418menuconfig NET_SCH_DEFAULT
419 bool "Allow override default queue discipline"
a7f7f624 420 help
8ea3e439 421 Support for selection of default queuing discipline.
422
423 Nearly all users can safely say no here, and the default
424 of pfifo_fast will be used. Many distributions already set
425 the default value via /proc/sys/net/core/default_qdisc.
426
427 If unsure, say N.
428
429if NET_SCH_DEFAULT
430
431choice
432 prompt "Default queuing discipline"
433 default DEFAULT_PFIFO_FAST
434 help
435 Select the queueing discipline that will be used by default
436 for all network devices.
437
438 config DEFAULT_FQ
439 bool "Fair Queue" if NET_SCH_FQ
440
441 config DEFAULT_CODEL
442 bool "Controlled Delay" if NET_SCH_CODEL
443
444 config DEFAULT_FQ_CODEL
445 bool "Fair Queue Controlled Delay" if NET_SCH_FQ_CODEL
446
b97e9d9d
DL
447 config DEFAULT_FQ_PIE
448 bool "Flow Queue Proportional Integral controller Enhanced" if NET_SCH_FQ_PIE
449
8ea3e439 450 config DEFAULT_SFQ
451 bool "Stochastic Fair Queue" if NET_SCH_SFQ
452
453 config DEFAULT_PFIFO_FAST
454 bool "Priority FIFO Fast"
455endchoice
456
457config DEFAULT_NET_SCH
458 string
459 default "pfifo_fast" if DEFAULT_PFIFO_FAST
460 default "fq" if DEFAULT_FQ
461 default "fq_codel" if DEFAULT_FQ_CODEL
b97e9d9d 462 default "fq_pie" if DEFAULT_FQ_PIE
8ea3e439 463 default "sfq" if DEFAULT_SFQ
464 default "pfifo_fast"
465endif
466
52ab4ac2 467comment "Classification"
1da177e4
LT
468
469config NET_CLS
6341e62b 470 bool
1da177e4
LT
471
472config NET_CLS_BASIC
52ab4ac2 473 tristate "Elementary classification (BASIC)"
52ab4ac2 474 select NET_CLS
a7f7f624 475 help
1da177e4
LT
476 Say Y here if you want to be able to classify packets using
477 only extended matches and actions.
478
479 To compile this code as a module, choose M here: the
480 module will be called cls_basic.
481
1da177e4 482config NET_CLS_ROUTE4
52ab4ac2 483 tristate "Routing decision (ROUTE)"
034cfe48 484 depends on INET
c7066f70 485 select IP_ROUTE_CLASSID
52ab4ac2 486 select NET_CLS
a7f7f624 487 help
52ab4ac2
TG
488 If you say Y here, you will be able to classify packets
489 according to the route table entry they matched.
1da177e4
LT
490
491 To compile this code as a module, choose M here: the
492 module will be called cls_route.
493
1da177e4 494config NET_CLS_FW
52ab4ac2 495 tristate "Netfilter mark (FW)"
52ab4ac2 496 select NET_CLS
a7f7f624 497 help
52ab4ac2
TG
498 If you say Y here, you will be able to classify packets
499 according to netfilter/firewall marks.
1da177e4
LT
500
501 To compile this code as a module, choose M here: the
502 module will be called cls_fw.
503
504config NET_CLS_U32
52ab4ac2 505 tristate "Universal 32bit comparisons w/ hashing (U32)"
52ab4ac2 506 select NET_CLS
a7f7f624 507 help
3539c272 508 Say Y here to be able to classify packets using a universal
52ab4ac2 509 32bit pieces based comparison scheme.
1da177e4
LT
510
511 To compile this code as a module, choose M here: the
512 module will be called cls_u32.
513
514config CLS_U32_PERF
52ab4ac2 515 bool "Performance counters support"
1da177e4 516 depends on NET_CLS_U32
a7f7f624 517 help
52ab4ac2
TG
518 Say Y here to make u32 gather additional statistics useful for
519 fine tuning u32 classifiers.
1da177e4
LT
520
521config CLS_U32_MARK
52ab4ac2 522 bool "Netfilter marks support"
82e91ffe 523 depends on NET_CLS_U32
a7f7f624 524 help
52ab4ac2 525 Say Y here to be able to use netfilter marks as u32 key.
1da177e4 526
e5dfb815
PM
527config NET_CLS_FLOW
528 tristate "Flow classifier"
529 select NET_CLS
a7f7f624 530 help
e5dfb815
PM
531 If you say Y here, you will be able to classify packets based on
532 a configurable combination of packet keys. This is mostly useful
533 in combination with SFQ.
534
535 To compile this code as a module, choose M here: the
536 module will be called cls_flow.
537
f4009237 538config NET_CLS_CGROUP
8e039d84 539 tristate "Control Group Classifier"
f4009237 540 select NET_CLS
fe1217c4 541 select CGROUP_NET_CLASSID
f4009237 542 depends on CGROUPS
a7f7f624 543 help
f4009237
TG
544 Say Y here if you want to classify packets based on the control
545 cgroup of their process.
546
8e039d84
BB
547 To compile this code as a module, choose M here: the
548 module will be called cls_cgroup.
549
7d1d65cb
DB
550config NET_CLS_BPF
551 tristate "BPF-based classifier"
552 select NET_CLS
a7f7f624 553 help
7d1d65cb
DB
554 If you say Y here, you will be able to classify packets based on
555 programmable BPF (JIT'ed) filters as an alternative to ematches.
556
557 To compile this code as a module, choose M here: the module will
558 be called cls_bpf.
559
77b9900e
JP
560config NET_CLS_FLOWER
561 tristate "Flower classifier"
562 select NET_CLS
a7f7f624 563 help
77b9900e
JP
564 If you say Y here, you will be able to classify packets based on
565 a configurable combination of packet keys and masks.
566
567 To compile this code as a module, choose M here: the module will
568 be called cls_flower.
569
bf3994d2
JP
570config NET_CLS_MATCHALL
571 tristate "Match-all classifier"
572 select NET_CLS
a7f7f624 573 help
bf3994d2
JP
574 If you say Y here, you will be able to classify packets based on
575 nothing. Every packet will match.
576
577 To compile this code as a module, choose M here: the module will
578 be called cls_matchall.
579
1da177e4
LT
580config NET_EMATCH
581 bool "Extended Matches"
52ab4ac2 582 select NET_CLS
a7f7f624 583 help
1da177e4
LT
584 Say Y here if you want to use extended matches on top of classifiers
585 and select the extended matches below.
586
587 Extended matches are small classification helpers not worth writing
52ab4ac2 588 a separate classifier for.
1da177e4 589
52ab4ac2 590 A recent version of the iproute2 package is required to use
1da177e4
LT
591 extended matches.
592
593config NET_EMATCH_STACK
594 int "Stack size"
595 depends on NET_EMATCH
596 default "32"
a7f7f624 597 help
1da177e4
LT
598 Size of the local stack variable used while evaluating the tree of
599 ematches. Limits the depth of the tree, i.e. the number of
b824979a 600 encapsulated precedences. Every level requires 4 bytes of additional
1da177e4
LT
601 stack space.
602
603config NET_EMATCH_CMP
604 tristate "Simple packet data comparison"
605 depends on NET_EMATCH
a7f7f624 606 help
1da177e4
LT
607 Say Y here if you want to be able to classify packets based on
608 simple packet data comparisons for 8, 16, and 32bit values.
609
610 To compile this code as a module, choose M here: the
611 module will be called em_cmp.
612
613config NET_EMATCH_NBYTE
614 tristate "Multi byte comparison"
615 depends on NET_EMATCH
a7f7f624 616 help
1da177e4
LT
617 Say Y here if you want to be able to classify packets based on
618 multiple byte comparisons mainly useful for IPv6 address comparisons.
619
620 To compile this code as a module, choose M here: the
621 module will be called em_nbyte.
622
623config NET_EMATCH_U32
52ab4ac2 624 tristate "U32 key"
1da177e4 625 depends on NET_EMATCH
a7f7f624 626 help
1da177e4
LT
627 Say Y here if you want to be able to classify packets using
628 the famous u32 key in combination with logic relations.
629
630 To compile this code as a module, choose M here: the
631 module will be called em_u32.
632
633config NET_EMATCH_META
634 tristate "Metadata"
635 depends on NET_EMATCH
a7f7f624 636 help
bb7e8c5a 637 Say Y here if you want to be able to classify packets based on
1da177e4
LT
638 metadata such as load average, netfilter attributes, socket
639 attributes and routing decisions.
640
641 To compile this code as a module, choose M here: the
642 module will be called em_meta.
643
d675c989
TG
644config NET_EMATCH_TEXT
645 tristate "Textsearch"
646 depends on NET_EMATCH
f2d368fa 647 select TEXTSEARCH
f7704347 648 select TEXTSEARCH_KMP
29cb9f9c 649 select TEXTSEARCH_BM
f7704347 650 select TEXTSEARCH_FSM
a7f7f624 651 help
52ab4ac2 652 Say Y here if you want to be able to classify packets based on
f7704347 653 textsearch comparisons.
d675c989
TG
654
655 To compile this code as a module, choose M here: the
656 module will be called em_text.
657
f057bbb6
RL
658config NET_EMATCH_CANID
659 tristate "CAN Identifier"
a303fbf3 660 depends on NET_EMATCH && (CAN=y || CAN=m)
a7f7f624 661 help
f057bbb6
RL
662 Say Y here if you want to be able to classify CAN frames based
663 on CAN Identifier.
664
665 To compile this code as a module, choose M here: the
666 module will be called em_canid.
667
6d4fa852
FW
668config NET_EMATCH_IPSET
669 tristate "IPset"
670 depends on NET_EMATCH && IP_SET
a7f7f624 671 help
6d4fa852
FW
672 Say Y here if you want to be able to classify packets based on
673 ipset membership.
674
675 To compile this code as a module, choose M here: the
676 module will be called em_ipset.
677
ccc007e4
EB
678config NET_EMATCH_IPT
679 tristate "IPtables Matches"
680 depends on NET_EMATCH && NETFILTER && NETFILTER_XTABLES
a7f7f624 681 help
ccc007e4
EB
682 Say Y here to be able to classify packets based on iptables
683 matches.
684 Current supported match is "policy" which allows packet classification
685 based on IPsec policy that was used during decapsulation
686
687 To compile this code as a module, choose M here: the
688 module will be called em_ipt.
689
1da177e4 690config NET_CLS_ACT
52ab4ac2 691 bool "Actions"
8ec1507d 692 select NET_CLS
e420bed0 693 select NET_XGRESS
a7f7f624 694 help
52ab4ac2
TG
695 Say Y here if you want to use traffic control actions. Actions
696 get attached to classifiers and are invoked after a successful
697 classification. They are used to overwrite the classification
698 result, instantly drop or redirect packets, etc.
699
700 A recent version of the iproute2 package is required to use
701 extended matches.
1da177e4
LT
702
703config NET_ACT_POLICE
52ab4ac2 704 tristate "Traffic Policing"
bf69abad 705 depends on NET_CLS_ACT
a7f7f624 706 help
52ab4ac2
TG
707 Say Y here if you want to do traffic policing, i.e. strict
708 bandwidth limiting. This action replaces the existing policing
709 module.
710
711 To compile this code as a module, choose M here: the
d4ae20b3 712 module will be called act_police.
1da177e4
LT
713
714config NET_ACT_GACT
bf69abad
KK
715 tristate "Generic actions"
716 depends on NET_CLS_ACT
a7f7f624 717 help
52ab4ac2
TG
718 Say Y here to take generic actions such as dropping and
719 accepting packets.
720
721 To compile this code as a module, choose M here: the
d4ae20b3 722 module will be called act_gact.
1da177e4
LT
723
724config GACT_PROB
bf69abad
KK
725 bool "Probability support"
726 depends on NET_ACT_GACT
a7f7f624 727 help
52ab4ac2 728 Say Y here to use the generic action randomly or deterministically.
1da177e4
LT
729
730config NET_ACT_MIRRED
bf69abad
KK
731 tristate "Redirecting and Mirroring"
732 depends on NET_CLS_ACT
a7f7f624 733 help
52ab4ac2
TG
734 Say Y here to allow packets to be mirrored or redirected to
735 other devices.
736
737 To compile this code as a module, choose M here: the
d4ae20b3 738 module will be called act_mirred.
1da177e4 739
5c5670fa 740config NET_ACT_SAMPLE
bf69abad
KK
741 tristate "Traffic Sampling"
742 depends on NET_CLS_ACT
743 select PSAMPLE
a7f7f624 744 help
5c5670fa
YG
745 Say Y here to allow packet sampling tc action. The packet sample
746 action consists of statistically choosing packets and sampling
747 them using the psample module.
748
749 To compile this code as a module, choose M here: the
750 module will be called act_sample.
751
b4219952 752config NET_ACT_NAT
bf69abad
KK
753 tristate "Stateless NAT"
754 depends on NET_CLS_ACT
a7f7f624 755 help
b4219952
HX
756 Say Y here to do stateless NAT on IPv4 packets. You should use
757 netfilter for NAT unless you know what you are doing.
758
759 To compile this code as a module, choose M here: the
d4ae20b3 760 module will be called act_nat.
b4219952 761
1da177e4 762config NET_ACT_PEDIT
bf69abad
KK
763 tristate "Packet Editing"
764 depends on NET_CLS_ACT
a7f7f624 765 help
52ab4ac2 766 Say Y here if you want to mangle the content of packets.
1da177e4 767
52ab4ac2 768 To compile this code as a module, choose M here: the
d4ae20b3 769 module will be called act_pedit.
1da177e4 770
db753079 771config NET_ACT_SIMP
bf69abad
KK
772 tristate "Simple Example (Debug)"
773 depends on NET_CLS_ACT
a7f7f624 774 help
52ab4ac2
TG
775 Say Y here to add a simple action for demonstration purposes.
776 It is meant as an example and for debugging purposes. It will
777 print a configured policy string followed by the packet count
778 to the console for every packet that passes by.
779
780 If unsure, say N.
781
782 To compile this code as a module, choose M here: the
d4ae20b3 783 module will be called act_simple.
52ab4ac2 784
ca9b0e27 785config NET_ACT_SKBEDIT
bf69abad
KK
786 tristate "SKB Editing"
787 depends on NET_CLS_ACT
a7f7f624 788 help
ca9b0e27
AD
789 Say Y here to change skb priority or queue_mapping settings.
790
791 If unsure, say N.
792
793 To compile this code as a module, choose M here: the
d4ae20b3 794 module will be called act_skbedit.
ca9b0e27 795
eb4d4065 796config NET_ACT_CSUM
bf69abad
KK
797 tristate "Checksum Updating"
798 depends on NET_CLS_ACT && INET
99de9d40 799 select NET_CRC32C
a7f7f624 800 help
eb4d4065
GB
801 Say Y here to update some common checksum after some direct
802 packet alterations.
803
804 To compile this code as a module, choose M here: the
805 module will be called act_csum.
806
2a2ea508
JH
807config NET_ACT_MPLS
808 tristate "MPLS manipulation"
809 depends on NET_CLS_ACT
810 help
811 Say Y here to push or pop MPLS headers.
812
813 If unsure, say N.
814
815 To compile this code as a module, choose M here: the
816 module will be called act_mpls.
817
c7e2b968 818config NET_ACT_VLAN
bf69abad
KK
819 tristate "Vlan manipulation"
820 depends on NET_CLS_ACT
a7f7f624 821 help
c7e2b968
JP
822 Say Y here to push or pop vlan headers.
823
824 If unsure, say N.
825
826 To compile this code as a module, choose M here: the
827 module will be called act_vlan.
828
d23b8ad8 829config NET_ACT_BPF
bf69abad
KK
830 tristate "BPF based action"
831 depends on NET_CLS_ACT
a7f7f624 832 help
d23b8ad8
JP
833 Say Y here to execute BPF code on packets. The BPF code will decide
834 if the packet should be dropped or not.
835
836 If unsure, say N.
837
838 To compile this code as a module, choose M here: the
839 module will be called act_bpf.
840
22a5dc0e 841config NET_ACT_CONNMARK
bf69abad 842 tristate "Netfilter Connection Mark Retriever"
102e2c07 843 depends on NET_CLS_ACT && NETFILTER
bf69abad 844 depends on NF_CONNTRACK && NF_CONNTRACK_MARK
a7f7f624 845 help
22a5dc0e
FF
846 Say Y here to allow retrieving of conn mark
847
848 If unsure, say N.
849
850 To compile this code as a module, choose M here: the
851 module will be called act_connmark.
852
24ec483c 853config NET_ACT_CTINFO
bf69abad 854 tristate "Netfilter Connection Mark Actions"
102e2c07 855 depends on NET_CLS_ACT && NETFILTER
bf69abad
KK
856 depends on NF_CONNTRACK && NF_CONNTRACK_MARK
857 help
24ec483c
KDB
858 Say Y here to allow transfer of a connmark stored information.
859 Current actions transfer connmark stored DSCP into
860 ipv4/v6 diffserv and/or to transfer connmark to packet
861 mark. Both are useful for restoring egress based marks
862 back onto ingress connections for qdisc priority mapping
863 purposes.
864
865 If unsure, say N.
866
867 To compile this code as a module, choose M here: the
868 module will be called act_ctinfo.
869
86da71b5 870config NET_ACT_SKBMOD
bf69abad
KK
871 tristate "skb data modification action"
872 depends on NET_CLS_ACT
a7f7f624 873 help
bf69abad 874 Say Y here to allow modification of skb data
86da71b5 875
bf69abad 876 If unsure, say N.
86da71b5 877
bf69abad
KK
878 To compile this code as a module, choose M here: the
879 module will be called act_skbmod.
86da71b5 880
ef6980b6 881config NET_ACT_IFE
bf69abad
KK
882 tristate "Inter-FE action based on IETF ForCES InterFE LFB"
883 depends on NET_CLS_ACT
884 select NET_IFE
a7f7f624 885 help
ef6980b6
JHS
886 Say Y here to allow for sourcing and terminating metadata
887 For details refer to netdev01 paper:
888 "Distributing Linux Traffic Control Classifier-Action Subsystem"
889 Authors: Jamal Hadi Salim and Damascene M. Joachimpillai
890
891 To compile this code as a module, choose M here: the
892 module will be called act_ife.
893
d0f6dd8a 894config NET_ACT_TUNNEL_KEY
bf69abad
KK
895 tristate "IP tunnel metadata manipulation"
896 depends on NET_CLS_ACT
a7f7f624 897 help
d0f6dd8a
AV
898 Say Y here to set/release ip tunnel metadata.
899
900 If unsure, say N.
901
902 To compile this code as a module, choose M here: the
903 module will be called act_tunnel_key.
904
b57dc7c1 905config NET_ACT_CT
bf69abad 906 tristate "connection tracking tc action"
8427fd10 907 depends on NET_CLS_ACT && NF_CONNTRACK && (!NF_NAT || NF_NAT) && NF_FLOW_TABLE
c0c3ab63 908 select NF_CONNTRACK_OVS
ebddb140 909 select NF_NAT_OVS if NF_NAT
bf69abad 910 help
b57dc7c1
PB
911 Say Y here to allow sending the packets to conntrack module.
912
913 If unsure, say N.
914
915 To compile this code as a module, choose M here: the
916 module will be called act_ct.
917
a51c328d
PL
918config NET_ACT_GATE
919 tristate "Frame gate entry list control tc action"
920 depends on NET_CLS_ACT
921 help
922 Say Y here to allow to control the ingress flow to be passed at
923 specific time slot and be dropped at other specific time slot by
924 the gate entry list.
925
926 If unsure, say N.
927 To compile this code as a module, choose M here: the
928 module will be called act_gate.
929
084e2f65 930config NET_IFE_SKBMARK
bf69abad
KK
931 tristate "Support to encoding decoding skb mark on IFE action"
932 depends on NET_ACT_IFE
084e2f65 933
200e10f4 934config NET_IFE_SKBPRIO
bf69abad
KK
935 tristate "Support to encoding decoding skb prio on IFE action"
936 depends on NET_ACT_IFE
200e10f4 937
408fbc22 938config NET_IFE_SKBTCINDEX
bf69abad
KK
939 tristate "Support to encoding decoding skb tcindex on IFE action"
940 depends on NET_ACT_IFE
408fbc22 941
95a7233c
PB
942config NET_TC_SKB_EXT
943 bool "TC recirculation support"
944 depends on NET_CLS_ACT
95a7233c
PB
945 select SKB_EXTENSIONS
946
947 help
948 Say Y here to allow tc chain misses to continue in OvS datapath in
949 the correct recirc_id, and hardware chain misses to continue in
950 the correct chain in tc software datapath.
951
952 Say N here if you won't be using tc<->ovs offload or tc chains offload.
953
05b8b0fa
RZ
954endif # NET_SCHED
955
85ef3e5c
RD
956config NET_SCH_FIFO
957 bool