Commit | Line | Data |
---|---|---|
ec8f24b7 | 1 | # SPDX-License-Identifier: GPL-2.0-only |
1da177e4 LT |
2 | # |
3 | # XFRM configuration | |
4 | # | |
6a2e9b73 SR |
5 | config XFRM |
6 | bool | |
e54d1527 | 7 | depends on INET |
97e219b7 | 8 | select GRO_CELLS |
a84e3f53 | 9 | select SKB_EXTENSIONS |
6a2e9b73 | 10 | |
25393d3f SK |
11 | config XFRM_OFFLOAD |
12 | bool | |
25393d3f | 13 | |
7e152524 JB |
14 | config XFRM_ALGO |
15 | tristate | |
16 | select XFRM | |
17 | select CRYPTO | |
597179b0 AB |
18 | select CRYPTO_HASH |
19 | select CRYPTO_BLKCIPHER | |
7e152524 | 20 | |
e54d1527 | 21 | if INET |
1da177e4 | 22 | config XFRM_USER |
654b32c6 | 23 | tristate "Transformation user configuration interface" |
7e152524 | 24 | select XFRM_ALGO |
1da177e4 | 25 | ---help--- |
654b32c6 MN |
26 | Support for Transformation(XFRM) user configuration interface |
27 | like IPsec used by native Linux tools. | |
1da177e4 LT |
28 | |
29 | If unsure, say Y. | |
30 | ||
f203b76d SK |
31 | config XFRM_INTERFACE |
32 | tristate "Transformation virtual interface" | |
33 | depends on XFRM && IPV6 | |
34 | ---help--- | |
35 | This provides a virtual interface to route IPsec traffic. | |
36 | ||
37 | If unsure, say N. | |
38 | ||
c11f1a15 | 39 | config XFRM_SUB_POLICY |
f215bf48 KC |
40 | bool "Transformation sub policy support" |
41 | depends on XFRM | |
c11f1a15 MN |
42 | ---help--- |
43 | Support sub policy for developers. By using sub policy with main | |
44 | one, two policies can be applied to the same packet at once. | |
45 | Policy which lives shorter time in kernel should be a sub. | |
46 | ||
47 | If unsure, say N. | |
48 | ||
d0473655 | 49 | config XFRM_MIGRATE |
f215bf48 KC |
50 | bool "Transformation migrate database" |
51 | depends on XFRM | |
d0473655 SS |
52 | ---help--- |
53 | A feature to update locator(s) of a given IPsec security | |
54 | association dynamically. This feature is required, for | |
55 | instance, in a Mobile IPv6 environment with IPsec configuration | |
56 | where mobile nodes change their attachment point to the Internet. | |
57 | ||
58 | If unsure, say N. | |
59 | ||
8ea84349 | 60 | config XFRM_STATISTICS |
f215bf48 | 61 | bool "Transformation statistics" |
e54d1527 | 62 | depends on XFRM && PROC_FS |
8ea84349 MN |
63 | ---help--- |
64 | This statistics is not a SNMP/MIB specification but shows | |
65 | statistics about transformation error (or almost error) factor | |
66 | at packet processing for developer. | |
67 | ||
68 | If unsure, say N. | |
69 | ||
6fccab67 HX |
70 | config XFRM_IPCOMP |
71 | tristate | |
7e152524 | 72 | select XFRM_ALGO |
6fccab67 HX |
73 | select CRYPTO |
74 | select CRYPTO_DEFLATE | |
75 | ||
6a2e9b73 SR |
76 | config NET_KEY |
77 | tristate "PF_KEY sockets" | |
7e152524 | 78 | select XFRM_ALGO |
6a2e9b73 SR |
79 | ---help--- |
80 | PF_KEYv2 socket family, compatible to KAME ones. | |
81 | They are required if you are going to use IPsec tools ported | |
82 | from KAME. | |
83 | ||
84 | Say Y unless you know what you are doing. | |
85 | ||
f6ed0ec0 | 86 | config NET_KEY_MIGRATE |
f215bf48 KC |
87 | bool "PF_KEY MIGRATE" |
88 | depends on NET_KEY | |
f6ed0ec0 SS |
89 | select XFRM_MIGRATE |
90 | ---help--- | |
91 | Add a PF_KEY MIGRATE message to PF_KEYv2 socket family. | |
92 | The PF_KEY MIGRATE message is used to dynamically update | |
93 | locator(s) of a given IPsec security association. | |
94 | This feature is required, for instance, in a Mobile IPv6 | |
95 | environment with IPsec configuration where mobile nodes | |
96 | change their attachment point to the Internet. Detail | |
97 | information can be found in the internet-draft | |
98 | <draft-sugimoto-mip6-pfkey-migrate>. | |
99 | ||
100 | If unsure, say N. | |
e54d1527 FW |
101 | |
102 | endif # INET |