1 # SPDX-License-Identifier: GPL-2.0-only
3 # Network device configuration
9 bool "Network device support"
11 You can say N here if you don't intend to connect your Linux box to
12 any other computer at all.
14 You'll have to say Y if your computer contains a network card that
15 you want to use under Linux. If you are going to run SLIP or PPP over
16 telephone line or null modem cable you need say Y here. Connecting
17 two machines with parallel ports using PLIP needs this, as well as
18 AX.25/KISS for sending Internet traffic over amateur radio links.
20 See also "The Linux Network Administrator's Guide" by Olaf Kirch and
21 Terry Dawson. Available at <http://www.tldp.org/guides.html>.
25 # All the following symbols are dependent on NETDEVICES - do not repeat
26 # that for each of the symbols.
34 bool "Network core driver support"
36 You can say N here if you do not intend to use any of the
37 networking core drivers (i.e. VLAN, bridging, bonding, etc.)
42 tristate "Bonding driver support"
44 depends on IPV6 || IPV6=n
45 depends on TLS || TLS_DEVICE=n
47 Say 'Y' or 'M' if you wish to be able to 'bond' multiple Ethernet
48 Channels together. This is called 'Etherchannel' by Cisco,
49 'Trunking' by Sun, 802.3ad by the IEEE, and 'Bonding' in Linux.
51 The driver supports multiple bonding modes to allow for both high
52 performance and high availability operation.
54 Refer to <file:Documentation/networking/bonding.rst> for more
57 To compile this driver as a module, choose M here: the module
58 will be called bonding.
61 tristate "Dummy net driver support"
63 This is essentially a bit-bucket device (i.e. traffic you send to
64 this device is consigned into oblivion) with a configurable IP
65 address. It is most commonly used in order to make your currently
66 inactive SLIP address seem like a real address for local programs.
67 If you use SLIP or PPP, you might want to say Y here. It won't
68 enlarge your kernel. What a deal. Read about it in the Network
69 Administrator's Guide, available from
70 <http://www.tldp.org/docs.html#guide>.
72 To compile this driver as a module, choose M here: the module
76 tristate "WireGuard secure network tunnel"
77 depends on NET && INET
78 depends on IPV6 || !IPV6
79 depends on !KMSAN # KMSAN doesn't support the crypto configs below
83 select CRYPTO_LIB_CURVE25519
84 select CRYPTO_LIB_CHACHA20POLY1305
85 select CRYPTO_CHACHA20_X86_64 if X86 && 64BIT
86 select CRYPTO_POLY1305_X86_64 if X86 && 64BIT
87 select CRYPTO_BLAKE2S_X86 if X86 && 64BIT
88 select CRYPTO_CURVE25519_X86 if X86 && 64BIT
89 select ARM_CRYPTO if ARM
90 select ARM64_CRYPTO if ARM64
91 select CRYPTO_CHACHA20_NEON if ARM || (ARM64 && KERNEL_MODE_NEON)
92 select CRYPTO_POLY1305_NEON if ARM64 && KERNEL_MODE_NEON
93 select CRYPTO_POLY1305_ARM if ARM
94 select CRYPTO_BLAKE2S_ARM if ARM
95 select CRYPTO_CURVE25519_NEON if ARM && KERNEL_MODE_NEON
96 select CRYPTO_CHACHA_MIPS if CPU_MIPS32_R2
97 select CRYPTO_POLY1305_MIPS if MIPS
98 select CRYPTO_CHACHA_S390 if S390
100 WireGuard is a secure, fast, and easy to use replacement for IPSec
101 that uses modern cryptography and clever networking tricks. It's
102 designed to be fairly general purpose and abstract enough to fit most
103 use cases, while at the same time remaining extremely simple to
104 configure. See www.wireguard.com for more info.
106 It's safe to say Y or M here, as the driver is very lightweight and
107 is only in use when an administrator chooses to add an interface.
109 config WIREGUARD_DEBUG
110 bool "Debugging checks and verbose messages"
113 This will write log messages for handshake and other events
114 that occur for a WireGuard interface. It will also perform some
115 extra validation checks and unit tests at various points. This is
116 only useful for debugging.
118 Say N here unless you know what you're doing.
121 tristate "EQL (serial line load balancing) support"
123 If you have two serial connections to some other computer (this
124 usually requires two modems and two telephone lines) and you use
125 SLIP (the protocol for sending Internet traffic over telephone
126 lines) or PPP (a better SLIP) on them, you can make them behave like
127 one double speed connection using this driver. Naturally, this has
128 to be supported at the other end as well, either with a similar EQL
129 Linux driver or with a Livingston Portmaster 2e.
131 Say Y if you want this and read
132 <file:Documentation/networking/eql.rst>. You may also want to read
133 section 6.2 of the NET-3-HOWTO, available from
134 <http://www.tldp.org/docs.html#howto>.
136 To compile this driver as a module, choose M here: the module
137 will be called eql. If unsure, say N.
140 bool "Fibre Channel driver support"
141 depends on SCSI && PCI
143 Fibre Channel is a high speed serial protocol mainly used to connect
144 large storage devices to the computer; it is compatible with and
145 intended to replace SCSI.
147 If you intend to use Fibre Channel, you need to have a Fibre channel
148 adaptor card in your computer; say Y here and to the driver for your
149 adaptor below. You also should have said Y to "SCSI support" and
150 "SCSI generic support".
153 tristate "Intermediate Functional Block support"
154 depends on NET_ACT_MIRRED || NFT_FWD_NETDEV
157 This is an intermediate driver that allows sharing of
159 To compile this driver as a module, choose M here: the module
160 will be called ifb. If you want to use more than one ifb
161 device at a time, you need to compile this driver as a module.
162 Instead of 'ifb', the devices will then be called 'ifb0',
164 Look at the iproute2 documentation directory for usage etc
166 source "drivers/net/team/Kconfig"
169 tristate "MAC-VLAN support"
171 This allows one to create virtual interfaces that map packets to
172 or from specific MAC addresses to a particular interface.
174 Macvlan devices can be added using the "ip" command from the
175 iproute2 package starting with the iproute2-2.6.23 release:
177 "ip link add link <real dev> [ address MAC ] [ NAME ] type macvlan"
179 To compile this driver as a module, choose M here: the module
180 will be called macvlan.
183 tristate "MAC-VLAN based tap driver"
188 This adds a specialized tap character device driver that is based
189 on the MAC-VLAN network interface, called macvtap. A macvtap device
190 can be added in the same way as a macvlan device, using 'type
191 macvtap', and then be accessed through the tap user space interface.
193 To compile this driver as a module, choose M here: the module
194 will be called macvtap.
200 select NET_L3_MASTER_DEV
203 tristate "IP-VLAN support"
205 depends on IPV6 || !IPV6
207 This allows one to create virtual devices off of a main interface
208 and packets will be delivered based on the dest L3 (IPv6/IPv4 addr)
209 on packets. All interfaces (including the main interface) share L2
210 making it transparent to the connected L2 switch.
212 Ipvlan devices can be added using the "ip" command from the
213 iproute2 package starting with the iproute2-3.19 release:
215 "ip link add link <main-dev> [ NAME ] type ipvlan"
217 To compile this driver as a module, choose M here: the module
218 will be called ipvlan.
221 tristate "IP-VLAN based tap driver"
226 This adds a specialized tap character device driver that is based
227 on the IP-VLAN network interface, called ipvtap. An ipvtap device
228 can be added in the same way as a ipvlan device, using 'type
229 ipvtap', and then be accessed through the tap user space interface.
231 To compile this driver as a module, choose M here: the module
232 will be called ipvtap.
235 tristate "Virtual eXtensible Local Area Network (VXLAN)"
237 select NET_UDP_TUNNEL
240 This allows one to create vxlan virtual interfaces that provide
241 Layer 2 Networks over Layer 3 Networks. VXLAN is often used
242 to tunnel virtual network infrastructure in virtualized environments.
243 For more information see:
244 http://tools.ietf.org/html/draft-mahalingam-dutt-dcops-vxlan-02
246 To compile this driver as a module, choose M here: the module
247 will be called vxlan.
250 tristate "Generic Network Virtualization Encapsulation"
252 depends on IPV6 || !IPV6
253 select NET_UDP_TUNNEL
256 This allows one to create geneve virtual interfaces that provide
257 Layer 2 Networks over Layer 3 Networks. GENEVE is often used
258 to tunnel virtual network infrastructure in virtualized environments.
259 For more information see:
260 http://tools.ietf.org/html/draft-gross-geneve-02
262 To compile this driver as a module, choose M here: the module
263 will be called geneve.
266 tristate "Bare UDP Encapsulation"
268 depends on IPV6 || !IPV6
269 select NET_UDP_TUNNEL
272 This adds a bare UDP tunnel module for tunnelling different
273 kinds of traffic like MPLS, IP, etc. inside a UDP tunnel.
275 To compile this driver as a module, choose M here: the module
276 will be called bareudp.
279 tristate "GPRS Tunneling Protocol datapath (GTP-U)"
281 select NET_UDP_TUNNEL
283 This allows one to create gtp virtual interfaces that provide
284 the GPRS Tunneling Protocol datapath (GTP-U). This tunneling protocol
285 is used to prevent subscribers from accessing mobile carrier core
286 network infrastructure. This driver requires a userspace software that
287 implements the signaling protocol (GTP-C) to update its PDP context
288 base, such as OpenGGSN <http://git.osmocom.org/openggsn/). This
289 tunneling protocol is implemented according to the GSM TS 09.60 and
290 3GPP TS 29.060 standards.
292 To compile this drivers as a module, choose M here: the module
296 tristate "Automatic Multicast Tunneling (AMT)"
297 depends on INET && IP_MULTICAST
298 depends on IPV6 || !IPV6
299 select NET_UDP_TUNNEL
301 This allows one to create AMT(Automatic Multicast Tunneling)
302 virtual interfaces that provide multicast tunneling.
303 There are two roles, Gateway, and Relay.
304 Gateway Encapsulates IGMP/MLD traffic from listeners to the Relay.
305 Gateway Decapsulates multicast traffic from the Relay to Listeners.
306 Relay Encapsulates multicast traffic from Sources to Gateway.
307 Relay Decapsulates IGMP/MLD traffic from Gateway.
309 To compile this drivers as a module, choose M here: the module
313 tristate "IEEE 802.1AE MAC-level encryption (MACsec)"
319 MACsec is an encryption standard for Ethernet.
322 tristate "Network console logging support"
324 If you want to log kernel messages over the network, enable this.
325 See <file:Documentation/networking/netconsole.rst> for details.
327 config NETCONSOLE_DYNAMIC
328 bool "Dynamic reconfiguration of logging targets"
329 depends on NETCONSOLE && SYSFS && CONFIGFS_FS && \
330 !(NETCONSOLE=y && CONFIGFS_FS=m)
332 This option enables the ability to dynamically reconfigure target
333 parameters (interface, IP addresses, port numbers, MAC addresses)
334 at runtime through a userspace interface exported using configfs.
335 See <file:Documentation/networking/netconsole.rst> for details.
341 config NET_POLL_CONTROLLER
345 tristate "Virtual Ethernet over NTB Transport"
346 depends on NTB_TRANSPORT
349 tristate "RapidIO Ethernet over messaging driver support"
352 config RIONET_TX_SIZE
353 int "Number of outbound queue entries"
357 config RIONET_RX_SIZE
358 int "Number of inbound queue entries"
363 tristate "Universal TUN/TAP device driver support"
367 TUN/TAP provides packet reception and transmission for user space
368 programs. It can be viewed as a simple Point-to-Point or Ethernet
369 device, which instead of receiving packets from a physical media,
370 receives them from user space program and instead of sending packets
371 via physical media writes them to the user space program.
373 When a program opens /dev/net/tun, driver creates and registers
374 corresponding net device tunX or tapX. After a program closed above
375 devices, driver will automatically delete tunXX or tapXX device and
376 all routes corresponding to it.
378 Please read <file:Documentation/networking/tuntap.rst> for more
381 To compile this driver as a module, choose M here: the module
384 If you don't know what to use this for, you don't need it.
389 This option is selected by any driver implementing tap user space
390 interface for a virtual interface to re-use core tap functionality.
392 config TUN_VNET_CROSS_LE
393 bool "Support for cross-endian vnet headers on little-endian kernels"
396 This option allows TUN/TAP and MACVTAP device drivers in a
397 little-endian kernel to parse vnet headers that come from a
398 big-endian legacy virtio device.
400 Userspace programs can control the feature using the TUNSETVNETBE
401 and TUNGETVNETBE ioctls.
403 Unless you have a little-endian system hosting a big-endian virtual
404 machine with a legacy virtio NIC, you should say N.
407 tristate "Virtual ethernet pair device"
409 This device is a local ethernet tunnel. Devices are created in pairs.
410 When one end receives the packet it appears on its pair and vice
414 tristate "Virtio network driver"
418 This is the virtual network driver for virtio. It can be used with
419 QEMU based VMMs (like KVM or Xen). Say Y or M.
422 tristate "Virtual netlink monitoring device"
424 This option enables a monitoring net device for netlink skbs. The
425 purpose of this is to analyze netlink messages with packet sockets.
426 Thus applications like tcpdump will be able to see local netlink
427 messages if they tap into the netlink device, record pcaps for further
428 diagnostics, etc. This is mostly intended for developers or support
429 to debug netlink issues. If unsure, say N.
432 tristate "Virtual Routing and Forwarding (Lite)"
433 depends on IP_MULTIPLE_TABLES
434 depends on NET_L3_MASTER_DEV
435 depends on IPV6 || IPV6=n
436 depends on IPV6_MULTIPLE_TABLES || IPV6=n
438 This option enables the support for mapping interfaces into VRF's. The
439 support enables VRF devices.
442 tristate "Virtual vsock monitoring device"
443 depends on VHOST_VSOCK
445 This option enables a monitoring net device for vsock sockets. It is
446 mostly intended for developers or support to debug vsock issues. If
450 tristate "MHI network driver"
453 This is the network driver for MHI bus. It can be used with
454 QCOM based WWAN modems for IP or QMAP/rmnet protocol (like SDX55).
462 source "drivers/net/arcnet/Kconfig"
464 source "drivers/atm/Kconfig"
466 source "drivers/net/caif/Kconfig"
468 source "drivers/net/dsa/Kconfig"
470 source "drivers/net/ethernet/Kconfig"
472 source "drivers/net/fddi/Kconfig"
474 source "drivers/net/hippi/Kconfig"
476 source "drivers/net/ipa/Kconfig"
479 tristate "General Instruments Surfboard 1000"
482 This is a driver for the General Instrument (also known as
483 NextLevel) SURFboard 1000 internal
484 cable modem. This is an ISA card which is used by a number of cable
485 TV companies to provide cable modem access. It's a one-way
486 downstream-only cable modem, meaning that your upstream net link is
487 provided by your regular phone modem.
489 At present this driver only compiles as a module, so say M here if
490 you have this card. The module will be called sb1000. Then read
491 <file:Documentation/networking/device_drivers/cable/sb1000.rst> for
492 information on how to use this module, as it needs special ppp
493 scripts for establishing a connection. Further documentation
494 and the necessary scripts can be found at:
496 <http://www.jacksonville.net/~fventuri/>
497 <http://home.adelphia.net/~siglercm/sb1000.html>
498 <http://linuxpower.cx/~cable/>
500 If you don't have this card, of course say N.
502 source "drivers/net/phy/Kconfig"
504 source "drivers/net/can/Kconfig"
506 source "drivers/net/mctp/Kconfig"
508 source "drivers/net/mdio/Kconfig"
510 source "drivers/net/pcs/Kconfig"
512 source "drivers/net/plip/Kconfig"
514 source "drivers/net/ppp/Kconfig"
516 source "drivers/net/slip/Kconfig"
518 source "drivers/s390/net/Kconfig"
520 source "drivers/net/usb/Kconfig"
522 source "drivers/net/wireless/Kconfig"
524 source "drivers/net/wan/Kconfig"
526 source "drivers/net/ieee802154/Kconfig"
528 source "drivers/net/wwan/Kconfig"
530 config XEN_NETDEV_FRONTEND
531 tristate "Xen network device frontend driver"
533 select XEN_XENBUS_FRONTEND
537 This driver provides support for Xen paravirtual network
538 devices exported by a Xen network driver domain (often
541 The corresponding Linux backend driver is enabled by the
542 CONFIG_XEN_NETDEV_BACKEND option.
544 If you are compiling a kernel for use as Xen guest, you
545 should say Y here. To compile this driver as a module, chose
546 M here: the module will be called xen-netfront.
548 config XEN_NETDEV_BACKEND
549 tristate "Xen backend network device"
550 depends on XEN_BACKEND
552 This driver allows the kernel to act as a Xen network driver
553 domain which exports paravirtual network devices to other
554 Xen domains. These devices can be accessed by any operating
555 system that implements a compatible front end.
557 The corresponding Linux frontend driver is enabled by the
558 CONFIG_XEN_NETDEV_FRONTEND configuration option.
560 The backend driver presents a standard network device
561 endpoint for each paravirtual network device to the driver
562 domain network stack. These can then be bridged or routed
563 etc in order to provide full network connectivity.
565 If you are compiling a kernel to run in a Xen network driver
566 domain (often this is domain 0) you should say Y here. To
567 compile this driver as a module, chose M here: the module
568 will be called xen-netback.
571 tristate "VMware VMXNET3 ethernet driver"
572 depends on PCI && INET
573 depends on PAGE_SIZE_LESS_THAN_64KB
575 This driver supports VMware's vmxnet3 virtual ethernet NIC.
576 To compile this driver as a module, choose M here: the
577 module will be called vmxnet3.
580 tristate "FUJITSU Extended Socket Network Device driver"
583 This driver provides support for Extended Socket network device
584 on Extended Partitioning of FUJITSU PRIMEQUEST 2000 E2 series.
587 tristate "Networking over USB4 and Thunderbolt cables"
588 depends on USB4 && INET
590 Select this if you want to create network between two computers
591 over a USB4 and Thunderbolt cables. The driver supports Apple
592 ThunderboltIP protocol and allows communication with any host
593 supporting the same protocol including Windows and macOS.
595 To compile this driver a module, choose M here. The module will be
596 called thunderbolt-net.
598 source "drivers/net/hyperv/Kconfig"
601 tristate "Simulated networking device"
604 depends on IPV6 || IPV6=n
605 depends on PSAMPLE || PSAMPLE=n
608 This driver is a developer testing tool and software model that can
609 be used to test various control path networking APIs, especially
612 To compile this driver as a module, choose M here: the module
613 will be called netdevsim.
616 tristate "Failover driver"
619 This provides an automated failover mechanism via APIs to create
620 and destroy a failover master netdev and manages a primary and
621 standby slave netdevs that get registered via the generic failover
622 infrastructure. This can be used by paravirtual drivers to enable
623 an alternate low latency datapath. It also enables live migration of
624 a VM with direct attached VF by failing over to the paravirtual
625 datapath when the VF is unplugged.
627 config NETDEV_LEGACY_INIT
631 Drivers that call netdev_boot_setup_check() should select this
632 symbol, everything else no longer needs it.