Kconfig 5.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178
  1. # SPDX-License-Identifier: GPL-2.0-only
  2. menuconfig IP_SET
  3. tristate "IP set support"
  4. depends on INET && NETFILTER
  5. select NETFILTER_NETLINK
  6. help
  7. This option adds IP set support to the kernel.
  8. In order to define and use the sets, you need the userspace utility
  9. ipset(8). You can use the sets in netfilter via the "set" match
  10. and "SET" target.
  11. To compile it as a module, choose M here. If unsure, say N.
  12. if IP_SET
  13. config IP_SET_MAX
  14. int "Maximum number of IP sets"
  15. default 256
  16. range 2 65534
  17. depends on IP_SET
  18. help
  19. You can define here default value of the maximum number
  20. of IP sets for the kernel.
  21. The value can be overridden by the 'max_sets' module
  22. parameter of the 'ip_set' module.
  23. config IP_SET_BITMAP_IP
  24. tristate "bitmap:ip set support"
  25. depends on IP_SET
  26. help
  27. This option adds the bitmap:ip set type support, by which one
  28. can store IPv4 addresses (or network addresse) from a range.
  29. To compile it as a module, choose M here. If unsure, say N.
  30. config IP_SET_BITMAP_IPMAC
  31. tristate "bitmap:ip,mac set support"
  32. depends on IP_SET
  33. help
  34. This option adds the bitmap:ip,mac set type support, by which one
  35. can store IPv4 address and (source) MAC address pairs from a range.
  36. To compile it as a module, choose M here. If unsure, say N.
  37. config IP_SET_BITMAP_PORT
  38. tristate "bitmap:port set support"
  39. depends on IP_SET
  40. help
  41. This option adds the bitmap:port set type support, by which one
  42. can store TCP/UDP port numbers from a range.
  43. To compile it as a module, choose M here. If unsure, say N.
  44. config IP_SET_HASH_IP
  45. tristate "hash:ip set support"
  46. depends on IP_SET
  47. help
  48. This option adds the hash:ip set type support, by which one
  49. can store arbitrary IPv4 or IPv6 addresses (or network addresses)
  50. in a set.
  51. To compile it as a module, choose M here. If unsure, say N.
  52. config IP_SET_HASH_IPMARK
  53. tristate "hash:ip,mark set support"
  54. depends on IP_SET
  55. help
  56. This option adds the hash:ip,mark set type support, by which one
  57. can store IPv4/IPv6 address and mark pairs.
  58. To compile it as a module, choose M here. If unsure, say N.
  59. config IP_SET_HASH_IPPORT
  60. tristate "hash:ip,port set support"
  61. depends on IP_SET
  62. help
  63. This option adds the hash:ip,port set type support, by which one
  64. can store IPv4/IPv6 address and protocol/port pairs.
  65. To compile it as a module, choose M here. If unsure, say N.
  66. config IP_SET_HASH_IPPORTIP
  67. tristate "hash:ip,port,ip set support"
  68. depends on IP_SET
  69. help
  70. This option adds the hash:ip,port,ip set type support, by which
  71. one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
  72. address triples in a set.
  73. To compile it as a module, choose M here. If unsure, say N.
  74. config IP_SET_HASH_IPPORTNET
  75. tristate "hash:ip,port,net set support"
  76. depends on IP_SET
  77. help
  78. This option adds the hash:ip,port,net set type support, by which
  79. one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
  80. network address/prefix triples in a set.
  81. To compile it as a module, choose M here. If unsure, say N.
  82. config IP_SET_HASH_IPMAC
  83. tristate "hash:ip,mac set support"
  84. depends on IP_SET
  85. help
  86. This option adds the hash:ip,mac set type support, by which
  87. one can store IPv4/IPv6 address and MAC (ethernet address) pairs in a set.
  88. To compile it as a module, choose M here. If unsure, say N.
  89. config IP_SET_HASH_MAC
  90. tristate "hash:mac set support"
  91. depends on IP_SET
  92. help
  93. This option adds the hash:mac set type support, by which
  94. one can store MAC (ethernet address) elements in a set.
  95. To compile it as a module, choose M here. If unsure, say N.
  96. config IP_SET_HASH_NETPORTNET
  97. tristate "hash:net,port,net set support"
  98. depends on IP_SET
  99. help
  100. This option adds the hash:net,port,net set type support, by which
  101. one can store two IPv4/IPv6 subnets, and a protocol/port in a set.
  102. To compile it as a module, choose M here. If unsure, say N.
  103. config IP_SET_HASH_NET
  104. tristate "hash:net set support"
  105. depends on IP_SET
  106. help
  107. This option adds the hash:net set type support, by which
  108. one can store IPv4/IPv6 network address/prefix elements in a set.
  109. To compile it as a module, choose M here. If unsure, say N.
  110. config IP_SET_HASH_NETNET
  111. tristate "hash:net,net set support"
  112. depends on IP_SET
  113. help
  114. This option adds the hash:net,net set type support, by which
  115. one can store IPv4/IPv6 network address/prefix pairs in a set.
  116. To compile it as a module, choose M here. If unsure, say N.
  117. config IP_SET_HASH_NETPORT
  118. tristate "hash:net,port set support"
  119. depends on IP_SET
  120. help
  121. This option adds the hash:net,port set type support, by which
  122. one can store IPv4/IPv6 network address/prefix and
  123. protocol/port pairs as elements in a set.
  124. To compile it as a module, choose M here. If unsure, say N.
  125. config IP_SET_HASH_NETIFACE
  126. tristate "hash:net,iface set support"
  127. depends on IP_SET
  128. help
  129. This option adds the hash:net,iface set type support, by which
  130. one can store IPv4/IPv6 network address/prefix and
  131. interface name pairs as elements in a set.
  132. To compile it as a module, choose M here. If unsure, say N.
  133. config IP_SET_LIST_SET
  134. tristate "list:set set support"
  135. depends on IP_SET
  136. help
  137. This option adds the list:set set type support. In this
  138. kind of set one can store the name of other sets and it forms
  139. an ordered union of the member sets.
  140. To compile it as a module, choose M here. If unsure, say N.
  141. endif # IP_SET