1# SPDX-License-Identifier: GPL-2.0-only
2#
3# Traffic control configuration.
4#
5
6menuconfig NET_SCHED
7	bool "QoS and/or fair queueing"
8	select NET_SCH_FIFO
9	help
10	  When the kernel has several packets to send out over a network
11	  device, it has to decide which ones to send first, which ones to
12	  delay, and which ones to drop. This is the job of the queueing
13	  disciplines, several different algorithms for how to do this
14	  "fairly" have been proposed.
15
16	  If you say N here, you will get the standard packet scheduler, which
17	  is a FIFO (first come, first served). If you say Y here, you will be
18	  able to choose from among several alternative algorithms which can
19	  then be attached to different network devices. This is useful for
20	  example if some of your network devices are real time devices that
21	  need a certain minimum data flow rate, or if you need to limit the
22	  maximum data flow rate for traffic which matches specified criteria.
23	  This code is considered to be experimental.
24
25	  To administer these schedulers, you'll need the user-level utilities
26	  from the package iproute2+tc at
27	  <https://www.kernel.org/pub/linux/utils/net/iproute2/>.  That package
28	  also contains some documentation; for more, check out
29	  <http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2>.
30
31	  This Quality of Service (QoS) support will enable you to use
32	  Differentiated Services (diffserv) and Resource Reservation Protocol
33	  (RSVP) on your Linux router if you also say Y to the corresponding
34	  classifiers below.  Documentation and software is at
35	  <http://diffserv.sourceforge.net/>.
36
37	  If you say Y here and to "/proc file system" below, you will be able
38	  to read status information about packet schedulers from the file
39	  /proc/net/psched.
40
41	  The available schedulers are listed in the following questions; you
42	  can say Y to as many as you like. If unsure, say N now.
43
44if NET_SCHED
45
46comment "Queueing/Scheduling"
47
48config NET_SCH_CBQ
49	tristate "Class Based Queueing (CBQ)"
50	help
51	  Say Y here if you want to use the Class-Based Queueing (CBQ) packet
52	  scheduling algorithm. This algorithm classifies the waiting packets
53	  into a tree-like hierarchy of classes; the leaves of this tree are
54	  in turn scheduled by separate algorithms.
55
56	  See the top of <file:net/sched/sch_cbq.c> for more details.
57
58	  CBQ is a commonly used scheduler, so if you're unsure, you should
59	  say Y here. Then say Y to all the queueing algorithms below that you
60	  want to use as leaf disciplines.
61
62	  To compile this code as a module, choose M here: the
63	  module will be called sch_cbq.
64
65config NET_SCH_HTB
66	tristate "Hierarchical Token Bucket (HTB)"
67	help
68	  Say Y here if you want to use the Hierarchical Token Buckets (HTB)
69	  packet scheduling algorithm. See
70	  <http://luxik.cdi.cz/~devik/qos/htb/> for complete manual and
71	  in-depth articles.
72
73	  HTB is very similar to CBQ regarding its goals however is has
74	  different properties and different algorithm.
75
76	  To compile this code as a module, choose M here: the
77	  module will be called sch_htb.
78
79config NET_SCH_HFSC
80	tristate "Hierarchical Fair Service Curve (HFSC)"
81	help
82	  Say Y here if you want to use the Hierarchical Fair Service Curve
83	  (HFSC) packet scheduling algorithm.
84
85	  To compile this code as a module, choose M here: the
86	  module will be called sch_hfsc.
87
88config NET_SCH_ATM
89	tristate "ATM Virtual Circuits (ATM)"
90	depends on ATM
91	help
92	  Say Y here if you want to use the ATM pseudo-scheduler.  This
93	  provides a framework for invoking classifiers, which in turn
94	  select classes of this queuing discipline.  Each class maps
95	  the flow(s) it is handling to a given virtual circuit.
96
97	  See the top of <file:net/sched/sch_atm.c> for more details.
98
99	  To compile this code as a module, choose M here: the
100	  module will be called sch_atm.
101
102config NET_SCH_PRIO
103	tristate "Multi Band Priority Queueing (PRIO)"
104	help
105	  Say Y here if you want to use an n-band priority queue packet
106	  scheduler.
107
108	  To compile this code as a module, choose M here: the
109	  module will be called sch_prio.
110
111config NET_SCH_MULTIQ
112	tristate "Hardware Multiqueue-aware Multi Band Queuing (MULTIQ)"
113	help
114	  Say Y here if you want to use an n-band queue packet scheduler
115	  to support devices that have multiple hardware transmit queues.
116
117	  To compile this code as a module, choose M here: the
118	  module will be called sch_multiq.
119
120config NET_SCH_RED
121	tristate "Random Early Detection (RED)"
122	help
123	  Say Y here if you want to use the Random Early Detection (RED)
124	  packet scheduling algorithm.
125
126	  See the top of <file:net/sched/sch_red.c> for more details.
127
128	  To compile this code as a module, choose M here: the
129	  module will be called sch_red.
130
131config NET_SCH_SFB
132	tristate "Stochastic Fair Blue (SFB)"
133	help
134	  Say Y here if you want to use the Stochastic Fair Blue (SFB)
135	  packet scheduling algorithm.
136
137	  See the top of <file:net/sched/sch_sfb.c> for more details.
138
139	  To compile this code as a module, choose M here: the
140	  module will be called sch_sfb.
141
142config NET_SCH_SFQ
143	tristate "Stochastic Fairness Queueing (SFQ)"
144	help
145	  Say Y here if you want to use the Stochastic Fairness Queueing (SFQ)
146	  packet scheduling algorithm.
147
148	  See the top of <file:net/sched/sch_sfq.c> for more details.
149
150	  To compile this code as a module, choose M here: the
151	  module will be called sch_sfq.
152
153config NET_SCH_TEQL
154	tristate "True Link Equalizer (TEQL)"
155	help
156	  Say Y here if you want to use the True Link Equalizer (TLE) packet
157	  scheduling algorithm. This queueing discipline allows the combination
158	  of several physical devices into one virtual device.
159
160	  See the top of <file:net/sched/sch_teql.c> for more details.
161
162	  To compile this code as a module, choose M here: the
163	  module will be called sch_teql.
164
165config NET_SCH_TBF
166	tristate "Token Bucket Filter (TBF)"
167	help
168	  Say Y here if you want to use the Token Bucket Filter (TBF) packet
169	  scheduling algorithm.
170
171	  See the top of <file:net/sched/sch_tbf.c> for more details.
172
173	  To compile this code as a module, choose M here: the
174	  module will be called sch_tbf.
175
176config NET_SCH_CBS
177	tristate "Credit Based Shaper (CBS)"
178	help
179	  Say Y here if you want to use the Credit Based Shaper (CBS) packet
180	  scheduling algorithm.
181
182	  See the top of <file:net/sched/sch_cbs.c> for more details.
183
184	  To compile this code as a module, choose M here: the
185	  module will be called sch_cbs.
186
187config NET_SCH_ETF
188	tristate "Earliest TxTime First (ETF)"
189	help
190	  Say Y here if you want to use the Earliest TxTime First (ETF) packet
191	  scheduling algorithm.
192
193	  See the top of <file:net/sched/sch_etf.c> for more details.
194
195	  To compile this code as a module, choose M here: the
196	  module will be called sch_etf.
197
198config NET_SCH_TAPRIO
199	tristate "Time Aware Priority (taprio) Scheduler"
200	help
201	  Say Y here if you want to use the Time Aware Priority (taprio) packet
202	  scheduling algorithm.
203
204	  See the top of <file:net/sched/sch_taprio.c> for more details.
205
206	  To compile this code as a module, choose M here: the
207	  module will be called sch_taprio.
208
209config NET_SCH_GRED
210	tristate "Generic Random Early Detection (GRED)"
211	help
212	  Say Y here if you want to use the Generic Random Early Detection
213	  (GRED) packet scheduling algorithm for some of your network devices
214	  (see the top of <file:net/sched/sch_red.c> for details and
215	  references about the algorithm).
216
217	  To compile this code as a module, choose M here: the
218	  module will be called sch_gred.
219
220config NET_SCH_DSMARK
221	tristate "Differentiated Services marker (DSMARK)"
222	help
223	  Say Y if you want to schedule packets according to the
224	  Differentiated Services architecture proposed in RFC 2475.
225	  Technical information on this method, with pointers to associated
226	  RFCs, is available at <http://www.gta.ufrj.br/diffserv/>.
227
228	  To compile this code as a module, choose M here: the
229	  module will be called sch_dsmark.
230
231config NET_SCH_NETEM
232	tristate "Network emulator (NETEM)"
233	help
234	  Say Y if you want to emulate network delay, loss, and packet
235	  re-ordering. This is often useful to simulate networks when
236	  testing applications or protocols.
237
238	  To compile this driver as a module, choose M here: the module
239	  will be called sch_netem.
240
241	  If unsure, say N.
242
243config NET_SCH_DRR
244	tristate "Deficit Round Robin scheduler (DRR)"
245	help
246	  Say Y here if you want to use the Deficit Round Robin (DRR) packet
247	  scheduling algorithm.
248
249	  To compile this driver as a module, choose M here: the module
250	  will be called sch_drr.
251
252	  If unsure, say N.
253
254config NET_SCH_MQPRIO
255	tristate "Multi-queue priority scheduler (MQPRIO)"
256	help
257	  Say Y here if you want to use the Multi-queue Priority scheduler.
258	  This scheduler allows QOS to be offloaded on NICs that have support
259	  for offloading QOS schedulers.
260
261	  To compile this driver as a module, choose M here: the module will
262	  be called sch_mqprio.
263
264	  If unsure, say N.
265
266config NET_SCH_SKBPRIO
267	tristate "SKB priority queue scheduler (SKBPRIO)"
268	help
269	  Say Y here if you want to use the SKB priority queue
270	  scheduler. This schedules packets according to skb->priority,
271	  which is useful for request packets in DoS mitigation systems such
272	  as Gatekeeper.
273
274	  To compile this driver as a module, choose M here: the module will
275	  be called sch_skbprio.
276
277	  If unsure, say N.
278
279config NET_SCH_CHOKE
280	tristate "CHOose and Keep responsive flow scheduler (CHOKE)"
281	help
282	  Say Y here if you want to use the CHOKe packet scheduler (CHOose
283	  and Keep for responsive flows, CHOose and Kill for unresponsive
284	  flows). This is a variation of RED which tries to penalize flows
285	  that monopolize the queue.
286
287	  To compile this code as a module, choose M here: the
288	  module will be called sch_choke.
289
290config NET_SCH_QFQ
291	tristate "Quick Fair Queueing scheduler (QFQ)"
292	help
293	  Say Y here if you want to use the Quick Fair Queueing Scheduler (QFQ)
294	  packet scheduling algorithm.
295
296	  To compile this driver as a module, choose M here: the module
297	  will be called sch_qfq.
298
299	  If unsure, say N.
300
301config NET_SCH_CODEL
302	tristate "Controlled Delay AQM (CODEL)"
303	help
304	  Say Y here if you want to use the Controlled Delay (CODEL)
305	  packet scheduling algorithm.
306
307	  To compile this driver as a module, choose M here: the module
308	  will be called sch_codel.
309
310	  If unsure, say N.
311
312config NET_SCH_FQ_CODEL
313	tristate "Fair Queue Controlled Delay AQM (FQ_CODEL)"
314	help
315	  Say Y here if you want to use the FQ Controlled Delay (FQ_CODEL)
316	  packet scheduling algorithm.
317
318	  To compile this driver as a module, choose M here: the module
319	  will be called sch_fq_codel.
320
321	  If unsure, say N.
322
323config NET_SCH_CAKE
324	tristate "Common Applications Kept Enhanced (CAKE)"
325	help
326	  Say Y here if you want to use the Common Applications Kept Enhanced
327	  (CAKE) queue management algorithm.
328
329	  To compile this driver as a module, choose M here: the module
330	  will be called sch_cake.
331
332	  If unsure, say N.
333
334config NET_SCH_FQ
335	tristate "Fair Queue"
336	help
337	  Say Y here if you want to use the FQ packet scheduling algorithm.
338
339	  FQ does flow separation, and is able to respect pacing requirements
340	  set by TCP stack into sk->sk_pacing_rate (for localy generated
341	  traffic)
342
343	  To compile this driver as a module, choose M here: the module
344	  will be called sch_fq.
345
346	  If unsure, say N.
347
348config NET_SCH_HHF
349	tristate "Heavy-Hitter Filter (HHF)"
350	help
351	  Say Y here if you want to use the Heavy-Hitter Filter (HHF)
352	  packet scheduling algorithm.
353
354	  To compile this driver as a module, choose M here: the module
355	  will be called sch_hhf.
356
357config NET_SCH_PIE
358	tristate "Proportional Integral controller Enhanced (PIE) scheduler"
359	help
360	  Say Y here if you want to use the Proportional Integral controller
361	  Enhanced scheduler packet scheduling algorithm.
362	  For more information, please see https://tools.ietf.org/html/rfc8033
363
364	  To compile this driver as a module, choose M here: the module
365	  will be called sch_pie.
366
367	  If unsure, say N.
368
369config NET_SCH_FQ_PIE
370	depends on NET_SCH_PIE
371	tristate "Flow Queue Proportional Integral controller Enhanced (FQ-PIE)"
372	help
373	  Say Y here if you want to use the Flow Queue Proportional Integral
374	  controller Enhanced (FQ-PIE) packet scheduling algorithm.
375	  For more information, please see https://tools.ietf.org/html/rfc8033
376
377	  To compile this driver as a module, choose M here: the module
378	  will be called sch_fq_pie.
379
380	  If unsure, say N.
381
382config NET_SCH_INGRESS
383	tristate "Ingress/classifier-action Qdisc"
384	depends on NET_CLS_ACT
385	select NET_INGRESS
386	select NET_EGRESS
387	help
388	  Say Y here if you want to use classifiers for incoming and/or outgoing
389	  packets. This qdisc doesn't do anything else besides running classifiers,
390	  which can also have actions attached to them. In case of outgoing packets,
391	  classifiers that this qdisc holds are executed in the transmit path
392	  before real enqueuing to an egress qdisc happens.
393
394	  If unsure, say Y.
395
396	  To compile this code as a module, choose M here: the module will be
397	  called sch_ingress with alias of sch_clsact.
398
399config NET_SCH_PLUG
400	tristate "Plug network traffic until release (PLUG)"
401	help
402
403	  This queuing discipline allows userspace to plug/unplug a network
404	  output queue, using the netlink interface.  When it receives an
405	  enqueue command it inserts a plug into the outbound queue that
406	  causes following packets to enqueue until a dequeue command arrives
407	  over netlink, causing the plug to be removed and resuming the normal
408	  packet flow.
409
410	  This module also provides a generic "network output buffering"
411	  functionality (aka output commit), wherein upon arrival of a dequeue
412	  command, only packets up to the first plug are released for delivery.
413	  The Remus HA project uses this module to enable speculative execution
414	  of virtual machines by allowing the generated network output to be rolled
415	  back if needed.
416
417	  For more information, please refer to <http://wiki.xenproject.org/wiki/Remus>
418
419	  Say Y here if you are using this kernel for Xen dom0 and
420	  want to protect Xen guests with Remus.
421
422	  To compile this code as a module, choose M here: the
423	  module will be called sch_plug.
424
425config NET_SCH_ETS
426	tristate "Enhanced transmission selection scheduler (ETS)"
427	help
428          The Enhanced Transmission Selection scheduler is a classful
429          queuing discipline that merges functionality of PRIO and DRR
430          qdiscs in one scheduler. ETS makes it easy to configure a set of
431          strict and bandwidth-sharing bands to implement the transmission
432          selection described in 802.1Qaz.
433
434	  Say Y here if you want to use the ETS packet scheduling
435	  algorithm.
436
437	  To compile this driver as a module, choose M here: the module
438	  will be called sch_ets.
439
440	  If unsure, say N.
441
442menuconfig NET_SCH_DEFAULT
443	bool "Allow override default queue discipline"
444	help
445	  Support for selection of default queuing discipline.
446
447	  Nearly all users can safely say no here, and the default
448	  of pfifo_fast will be used. Many distributions already set
449	  the default value via /proc/sys/net/core/default_qdisc.
450
451	  If unsure, say N.
452
453if NET_SCH_DEFAULT
454
455choice
456	prompt "Default queuing discipline"
457	default DEFAULT_PFIFO_FAST
458	help
459	  Select the queueing discipline that will be used by default
460	  for all network devices.
461
462	config DEFAULT_FQ
463		bool "Fair Queue" if NET_SCH_FQ
464
465	config DEFAULT_CODEL
466		bool "Controlled Delay" if NET_SCH_CODEL
467
468	config DEFAULT_FQ_CODEL
469		bool "Fair Queue Controlled Delay" if NET_SCH_FQ_CODEL
470
471	config DEFAULT_FQ_PIE
472		bool "Flow Queue Proportional Integral controller Enhanced" if NET_SCH_FQ_PIE
473
474	config DEFAULT_SFQ
475		bool "Stochastic Fair Queue" if NET_SCH_SFQ
476
477	config DEFAULT_PFIFO_FAST
478		bool "Priority FIFO Fast"
479endchoice
480
481config DEFAULT_NET_SCH
482	string
483	default "pfifo_fast" if DEFAULT_PFIFO_FAST
484	default "fq" if DEFAULT_FQ
485	default "fq_codel" if DEFAULT_FQ_CODEL
486	default "fq_pie" if DEFAULT_FQ_PIE
487	default "sfq" if DEFAULT_SFQ
488	default "pfifo_fast"
489endif
490
491comment "Classification"
492
493config NET_CLS
494	bool
495
496config NET_CLS_BASIC
497	tristate "Elementary classification (BASIC)"
498	select NET_CLS
499	help
500	  Say Y here if you want to be able to classify packets using
501	  only extended matches and actions.
502
503	  To compile this code as a module, choose M here: the
504	  module will be called cls_basic.
505
506config NET_CLS_TCINDEX
507	tristate "Traffic-Control Index (TCINDEX)"
508	select NET_CLS
509	help
510	  Say Y here if you want to be able to classify packets based on
511	  traffic control indices. You will want this feature if you want
512	  to implement Differentiated Services together with DSMARK.
513
514	  To compile this code as a module, choose M here: the
515	  module will be called cls_tcindex.
516
517config NET_CLS_ROUTE4
518	tristate "Routing decision (ROUTE)"
519	depends on INET
520	select IP_ROUTE_CLASSID
521	select NET_CLS
522	help
523	  If you say Y here, you will be able to classify packets
524	  according to the route table entry they matched.
525
526	  To compile this code as a module, choose M here: the
527	  module will be called cls_route.
528
529config NET_CLS_FW
530	tristate "Netfilter mark (FW)"
531	select NET_CLS
532	help
533	  If you say Y here, you will be able to classify packets
534	  according to netfilter/firewall marks.
535
536	  To compile this code as a module, choose M here: the
537	  module will be called cls_fw.
538
539config NET_CLS_U32
540	tristate "Universal 32bit comparisons w/ hashing (U32)"
541	select NET_CLS
542	help
543	  Say Y here to be able to classify packets using a universal
544	  32bit pieces based comparison scheme.
545
546	  To compile this code as a module, choose M here: the
547	  module will be called cls_u32.
548
549config CLS_U32_PERF
550	bool "Performance counters support"
551	depends on NET_CLS_U32
552	help
553	  Say Y here to make u32 gather additional statistics useful for
554	  fine tuning u32 classifiers.
555
556config CLS_U32_MARK
557	bool "Netfilter marks support"
558	depends on NET_CLS_U32
559	help
560	  Say Y here to be able to use netfilter marks as u32 key.
561
562config NET_CLS_RSVP
563	tristate "IPv4 Resource Reservation Protocol (RSVP)"
564	select NET_CLS
565	help
566	  The Resource Reservation Protocol (RSVP) permits end systems to
567	  request a minimum and maximum data flow rate for a connection; this
568	  is important for real time data such as streaming sound or video.
569
570	  Say Y here if you want to be able to classify outgoing packets based
571	  on their RSVP requests.
572
573	  To compile this code as a module, choose M here: the
574	  module will be called cls_rsvp.
575
576config NET_CLS_RSVP6
577	tristate "IPv6 Resource Reservation Protocol (RSVP6)"
578	select NET_CLS
579	help
580	  The Resource Reservation Protocol (RSVP) permits end systems to
581	  request a minimum and maximum data flow rate for a connection; this
582	  is important for real time data such as streaming sound or video.
583
584	  Say Y here if you want to be able to classify outgoing packets based
585	  on their RSVP requests and you are using the IPv6 protocol.
586
587	  To compile this code as a module, choose M here: the
588	  module will be called cls_rsvp6.
589
590config NET_CLS_FLOW
591	tristate "Flow classifier"
592	select NET_CLS
593	help
594	  If you say Y here, you will be able to classify packets based on
595	  a configurable combination of packet keys. This is mostly useful
596	  in combination with SFQ.
597
598	  To compile this code as a module, choose M here: the
599	  module will be called cls_flow.
600
601config NET_CLS_CGROUP
602	tristate "Control Group Classifier"
603	select NET_CLS
604	select CGROUP_NET_CLASSID
605	depends on CGROUPS
606	help
607	  Say Y here if you want to classify packets based on the control
608	  cgroup of their process.
609
610	  To compile this code as a module, choose M here: the
611	  module will be called cls_cgroup.
612
613config NET_CLS_BPF
614	tristate "BPF-based classifier"
615	select NET_CLS
616	help
617	  If you say Y here, you will be able to classify packets based on
618	  programmable BPF (JIT'ed) filters as an alternative to ematches.
619
620	  To compile this code as a module, choose M here: the module will
621	  be called cls_bpf.
622
623config NET_CLS_FLOWER
624	tristate "Flower classifier"
625	select NET_CLS
626	help
627	  If you say Y here, you will be able to classify packets based on
628	  a configurable combination of packet keys and masks.
629
630	  To compile this code as a module, choose M here: the module will
631	  be called cls_flower.
632
633config NET_CLS_MATCHALL
634	tristate "Match-all classifier"
635	select NET_CLS
636	help
637	  If you say Y here, you will be able to classify packets based on
638	  nothing. Every packet will match.
639
640	  To compile this code as a module, choose M here: the module will
641	  be called cls_matchall.
642
643config NET_EMATCH
644	bool "Extended Matches"
645	select NET_CLS
646	help
647	  Say Y here if you want to use extended matches on top of classifiers
648	  and select the extended matches below.
649
650	  Extended matches are small classification helpers not worth writing
651	  a separate classifier for.
652
653	  A recent version of the iproute2 package is required to use
654	  extended matches.
655
656config NET_EMATCH_STACK
657	int "Stack size"
658	depends on NET_EMATCH
659	default "32"
660	help
661	  Size of the local stack variable used while evaluating the tree of
662	  ematches. Limits the depth of the tree, i.e. the number of
663	  encapsulated precedences. Every level requires 4 bytes of additional
664	  stack space.
665
666config NET_EMATCH_CMP
667	tristate "Simple packet data comparison"
668	depends on NET_EMATCH
669	help
670	  Say Y here if you want to be able to classify packets based on
671	  simple packet data comparisons for 8, 16, and 32bit values.
672
673	  To compile this code as a module, choose M here: the
674	  module will be called em_cmp.
675
676config NET_EMATCH_NBYTE
677	tristate "Multi byte comparison"
678	depends on NET_EMATCH
679	help
680	  Say Y here if you want to be able to classify packets based on
681	  multiple byte comparisons mainly useful for IPv6 address comparisons.
682
683	  To compile this code as a module, choose M here: the
684	  module will be called em_nbyte.
685
686config NET_EMATCH_U32
687	tristate "U32 key"
688	depends on NET_EMATCH
689	help
690	  Say Y here if you want to be able to classify packets using
691	  the famous u32 key in combination with logic relations.
692
693	  To compile this code as a module, choose M here: the
694	  module will be called em_u32.
695
696config NET_EMATCH_META
697	tristate "Metadata"
698	depends on NET_EMATCH
699	help
700	  Say Y here if you want to be able to classify packets based on
701	  metadata such as load average, netfilter attributes, socket
702	  attributes and routing decisions.
703
704	  To compile this code as a module, choose M here: the
705	  module will be called em_meta.
706
707config NET_EMATCH_TEXT
708	tristate "Textsearch"
709	depends on NET_EMATCH
710	select TEXTSEARCH
711	select TEXTSEARCH_KMP
712	select TEXTSEARCH_BM
713	select TEXTSEARCH_FSM
714	help
715	  Say Y here if you want to be able to classify packets based on
716	  textsearch comparisons.
717
718	  To compile this code as a module, choose M here: the
719	  module will be called em_text.
720
721config NET_EMATCH_CANID
722	tristate "CAN Identifier"
723	depends on NET_EMATCH && (CAN=y || CAN=m)
724	help
725	  Say Y here if you want to be able to classify CAN frames based
726	  on CAN Identifier.
727
728	  To compile this code as a module, choose M here: the
729	  module will be called em_canid.
730
731config NET_EMATCH_IPSET
732	tristate "IPset"
733	depends on NET_EMATCH && IP_SET
734	help
735	  Say Y here if you want to be able to classify packets based on
736	  ipset membership.
737
738	  To compile this code as a module, choose M here: the
739	  module will be called em_ipset.
740
741config NET_EMATCH_IPT
742	tristate "IPtables Matches"
743	depends on NET_EMATCH && NETFILTER && NETFILTER_XTABLES
744	help
745	  Say Y here to be able to classify packets based on iptables
746	  matches.
747	  Current supported match is "policy" which allows packet classification
748	  based on IPsec policy that was used during decapsulation
749
750	  To compile this code as a module, choose M here: the
751	  module will be called em_ipt.
752
753config NET_CLS_ACT
754	bool "Actions"
755	select NET_CLS
756	help
757	  Say Y here if you want to use traffic control actions. Actions
758	  get attached to classifiers and are invoked after a successful
759	  classification. They are used to overwrite the classification
760	  result, instantly drop or redirect packets, etc.
761
762	  A recent version of the iproute2 package is required to use
763	  extended matches.
764
765config NET_ACT_POLICE
766	tristate "Traffic Policing"
767	depends on NET_CLS_ACT
768	help
769	  Say Y here if you want to do traffic policing, i.e. strict
770	  bandwidth limiting. This action replaces the existing policing
771	  module.
772
773	  To compile this code as a module, choose M here: the
774	  module will be called act_police.
775
776config NET_ACT_GACT
777	tristate "Generic actions"
778	depends on NET_CLS_ACT
779	help
780	  Say Y here to take generic actions such as dropping and
781	  accepting packets.
782
783	  To compile this code as a module, choose M here: the
784	  module will be called act_gact.
785
786config GACT_PROB
787	bool "Probability support"
788	depends on NET_ACT_GACT
789	help
790	  Say Y here to use the generic action randomly or deterministically.
791
792config NET_ACT_MIRRED
793	tristate "Redirecting and Mirroring"
794	depends on NET_CLS_ACT
795	help
796	  Say Y here to allow packets to be mirrored or redirected to
797	  other devices.
798
799	  To compile this code as a module, choose M here: the
800	  module will be called act_mirred.
801
802config NET_ACT_SAMPLE
803	tristate "Traffic Sampling"
804	depends on NET_CLS_ACT
805	select PSAMPLE
806	help
807	  Say Y here to allow packet sampling tc action. The packet sample
808	  action consists of statistically choosing packets and sampling
809	  them using the psample module.
810
811	  To compile this code as a module, choose M here: the
812	  module will be called act_sample.
813
814config NET_ACT_IPT
815	tristate "IPtables targets"
816	depends on NET_CLS_ACT && NETFILTER && NETFILTER_XTABLES
817	help
818	  Say Y here to be able to invoke iptables targets after successful
819	  classification.
820
821	  To compile this code as a module, choose M here: the
822	  module will be called act_ipt.
823
824config NET_ACT_NAT
825	tristate "Stateless NAT"
826	depends on NET_CLS_ACT
827	help
828	  Say Y here to do stateless NAT on IPv4 packets.  You should use
829	  netfilter for NAT unless you know what you are doing.
830
831	  To compile this code as a module, choose M here: the
832	  module will be called act_nat.
833
834config NET_ACT_PEDIT
835	tristate "Packet Editing"
836	depends on NET_CLS_ACT
837	help
838	  Say Y here if you want to mangle the content of packets.
839
840	  To compile this code as a module, choose M here: the
841	  module will be called act_pedit.
842
843config NET_ACT_SIMP
844	tristate "Simple Example (Debug)"
845	depends on NET_CLS_ACT
846	help
847	  Say Y here to add a simple action for demonstration purposes.
848	  It is meant as an example and for debugging purposes. It will
849	  print a configured policy string followed by the packet count
850	  to the console for every packet that passes by.
851
852	  If unsure, say N.
853
854	  To compile this code as a module, choose M here: the
855	  module will be called act_simple.
856
857config NET_ACT_SKBEDIT
858	tristate "SKB Editing"
859	depends on NET_CLS_ACT
860	help
861	  Say Y here to change skb priority or queue_mapping settings.
862
863	  If unsure, say N.
864
865	  To compile this code as a module, choose M here: the
866	  module will be called act_skbedit.
867
868config NET_ACT_CSUM
869	tristate "Checksum Updating"
870	depends on NET_CLS_ACT && INET
871	select LIBCRC32C
872	help
873	  Say Y here to update some common checksum after some direct
874	  packet alterations.
875
876	  To compile this code as a module, choose M here: the
877	  module will be called act_csum.
878
879config NET_ACT_MPLS
880	tristate "MPLS manipulation"
881	depends on NET_CLS_ACT
882	help
883	  Say Y here to push or pop MPLS headers.
884
885	  If unsure, say N.
886
887	  To compile this code as a module, choose M here: the
888	  module will be called act_mpls.
889
890config NET_ACT_VLAN
891	tristate "Vlan manipulation"
892	depends on NET_CLS_ACT
893	help
894	  Say Y here to push or pop vlan headers.
895
896	  If unsure, say N.
897
898	  To compile this code as a module, choose M here: the
899	  module will be called act_vlan.
900
901config NET_ACT_BPF
902	tristate "BPF based action"
903	depends on NET_CLS_ACT
904	help
905	  Say Y here to execute BPF code on packets. The BPF code will decide
906	  if the packet should be dropped or not.
907
908	  If unsure, say N.
909
910	  To compile this code as a module, choose M here: the
911	  module will be called act_bpf.
912
913config NET_ACT_CONNMARK
914	tristate "Netfilter Connection Mark Retriever"
915	depends on NET_CLS_ACT && NETFILTER
916	depends on NF_CONNTRACK && NF_CONNTRACK_MARK
917	help
918	  Say Y here to allow retrieving of conn mark
919
920	  If unsure, say N.
921
922	  To compile this code as a module, choose M here: the
923	  module will be called act_connmark.
924
925config NET_ACT_CTINFO
926	tristate "Netfilter Connection Mark Actions"
927	depends on NET_CLS_ACT && NETFILTER
928	depends on NF_CONNTRACK && NF_CONNTRACK_MARK
929	help
930	  Say Y here to allow transfer of a connmark stored information.
931	  Current actions transfer connmark stored DSCP into
932	  ipv4/v6 diffserv and/or to transfer connmark to packet
933	  mark.  Both are useful for restoring egress based marks
934	  back onto ingress connections for qdisc priority mapping
935	  purposes.
936
937	  If unsure, say N.
938
939	  To compile this code as a module, choose M here: the
940	  module will be called act_ctinfo.
941
942config NET_ACT_SKBMOD
943	tristate "skb data modification action"
944	depends on NET_CLS_ACT
945	help
946	 Say Y here to allow modification of skb data
947
948	 If unsure, say N.
949
950	 To compile this code as a module, choose M here: the
951	 module will be called act_skbmod.
952
953config NET_ACT_IFE
954	tristate "Inter-FE action based on IETF ForCES InterFE LFB"
955	depends on NET_CLS_ACT
956	select NET_IFE
957	help
958	  Say Y here to allow for sourcing and terminating metadata
959	  For details refer to netdev01 paper:
960	  "Distributing Linux Traffic Control Classifier-Action Subsystem"
961	   Authors: Jamal Hadi Salim and Damascene M. Joachimpillai
962
963	  To compile this code as a module, choose M here: the
964	  module will be called act_ife.
965
966config NET_ACT_TUNNEL_KEY
967	tristate "IP tunnel metadata manipulation"
968	depends on NET_CLS_ACT
969	help
970	  Say Y here to set/release ip tunnel metadata.
971
972	  If unsure, say N.
973
974	  To compile this code as a module, choose M here: the
975	  module will be called act_tunnel_key.
976
977config NET_ACT_CT
978	tristate "connection tracking tc action"
979	depends on NET_CLS_ACT && NF_CONNTRACK && NF_NAT && NF_FLOW_TABLE
980	help
981	  Say Y here to allow sending the packets to conntrack module.
982
983	  If unsure, say N.
984
985	  To compile this code as a module, choose M here: the
986	  module will be called act_ct.
987
988config NET_ACT_GATE
989	tristate "Frame gate entry list control tc action"
990	depends on NET_CLS_ACT
991	help
992	  Say Y here to allow to control the ingress flow to be passed at
993	  specific time slot and be dropped at other specific time slot by
994	  the gate entry list.
995
996	  If unsure, say N.
997	  To compile this code as a module, choose M here: the
998	  module will be called act_gate.
999
1000config NET_IFE_SKBMARK
1001	tristate "Support to encoding decoding skb mark on IFE action"
1002	depends on NET_ACT_IFE
1003
1004config NET_IFE_SKBPRIO
1005	tristate "Support to encoding decoding skb prio on IFE action"
1006	depends on NET_ACT_IFE
1007
1008config NET_IFE_SKBTCINDEX
1009	tristate "Support to encoding decoding skb tcindex on IFE action"
1010	depends on NET_ACT_IFE
1011
1012config NET_TC_SKB_EXT
1013	bool "TC recirculation support"
1014	depends on NET_CLS_ACT
1015	select SKB_EXTENSIONS
1016
1017	help
1018	  Say Y here to allow tc chain misses to continue in OvS datapath in
1019	  the correct recirc_id, and hardware chain misses to continue in
1020	  the correct chain in tc software datapath.
1021
1022	  Say N here if you won't be using tc<->ovs offload or tc chains offload.
1023
1024endif # NET_SCHED
1025
1026config NET_SCH_FIFO
1027	bool
1028