Kconfig 1.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263
  1. #
  2. # XFRM configuration
  3. #
  4. config XFRM
  5. bool
  6. depends on NET
  7. config XFRM_USER
  8. tristate "Transformation user configuration interface"
  9. depends on INET && XFRM
  10. ---help---
  11. Support for Transformation(XFRM) user configuration interface
  12. like IPsec used by native Linux tools.
  13. If unsure, say Y.
  14. config XFRM_SUB_POLICY
  15. bool "Transformation sub policy support (EXPERIMENTAL)"
  16. depends on XFRM && EXPERIMENTAL
  17. ---help---
  18. Support sub policy for developers. By using sub policy with main
  19. one, two policies can be applied to the same packet at once.
  20. Policy which lives shorter time in kernel should be a sub.
  21. If unsure, say N.
  22. config XFRM_MIGRATE
  23. bool "Transformation migrate database (EXPERIMENTAL)"
  24. depends on XFRM && EXPERIMENTAL
  25. ---help---
  26. A feature to update locator(s) of a given IPsec security
  27. association dynamically. This feature is required, for
  28. instance, in a Mobile IPv6 environment with IPsec configuration
  29. where mobile nodes change their attachment point to the Internet.
  30. If unsure, say N.
  31. config NET_KEY
  32. tristate "PF_KEY sockets"
  33. select XFRM
  34. ---help---
  35. PF_KEYv2 socket family, compatible to KAME ones.
  36. They are required if you are going to use IPsec tools ported
  37. from KAME.
  38. Say Y unless you know what you are doing.
  39. config NET_KEY_MIGRATE
  40. bool "PF_KEY MIGRATE (EXPERIMENTAL)"
  41. depends on NET_KEY && EXPERIMENTAL
  42. select XFRM_MIGRATE
  43. ---help---
  44. Add a PF_KEY MIGRATE message to PF_KEYv2 socket family.
  45. The PF_KEY MIGRATE message is used to dynamically update
  46. locator(s) of a given IPsec security association.
  47. This feature is required, for instance, in a Mobile IPv6
  48. environment with IPsec configuration where mobile nodes
  49. change their attachment point to the Internet. Detail
  50. information can be found in the internet-draft
  51. <draft-sugimoto-mip6-pfkey-migrate>.
  52. If unsure, say N.