Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel
os
linux
1# SPDX-License-Identifier: GPL-2.0-only
2#
3# Traffic control configuration.
4#
5
6menuconfig NET_SCHED
7 bool "QoS and/or fair queueing"
8 select NET_SCH_FIFO
9 help
10 When the kernel has several packets to send out over a network
11 device, it has to decide which ones to send first, which ones to
12 delay, and which ones to drop. This is the job of the queueing
13 disciplines, several different algorithms for how to do this
14 "fairly" have been proposed.
15
16 If you say N here, you will get the standard packet scheduler, which
17 is a FIFO (first come, first served). If you say Y here, you will be
18 able to choose from among several alternative algorithms which can
19 then be attached to different network devices. This is useful for
20 example if some of your network devices are real time devices that
21 need a certain minimum data flow rate, or if you need to limit the
22 maximum data flow rate for traffic which matches specified criteria.
23 This code is considered to be experimental.
24
25 To administer these schedulers, you'll need the user-level utilities
26 from the package iproute2+tc at
27 <https://www.kernel.org/pub/linux/utils/net/iproute2/>. That package
28 also contains some documentation; for more, check out
29 <http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2>.
30
31 This Quality of Service (QoS) support will enable you to use
32 Differentiated Services (diffserv) and Resource Reservation Protocol
33 (RSVP) on your Linux router if you also say Y to the corresponding
34 classifiers below. Documentation and software is at
35 <http://diffserv.sourceforge.net/>.
36
37 If you say Y here and to "/proc file system" below, you will be able
38 to read status information about packet schedulers from the file
39 /proc/net/psched.
40
41 The available schedulers are listed in the following questions; you
42 can say Y to as many as you like. If unsure, say N now.
43
44if NET_SCHED
45
46comment "Queueing/Scheduling"
47
48config NET_SCH_HTB
49 tristate "Hierarchical Token Bucket (HTB)"
50 help
51 Say Y here if you want to use the Hierarchical Token Buckets (HTB)
52 packet scheduling algorithm. See
53 <http://luxik.cdi.cz/~devik/qos/htb/> for complete manual and
54 in-depth articles.
55
56 HTB is very similar to CBQ regarding its goals however is has
57 different properties and different algorithm.
58
59 To compile this code as a module, choose M here: the
60 module will be called sch_htb.
61
62config NET_SCH_HFSC
63 tristate "Hierarchical Fair Service Curve (HFSC)"
64 help
65 Say Y here if you want to use the Hierarchical Fair Service Curve
66 (HFSC) packet scheduling algorithm.
67
68 To compile this code as a module, choose M here: the
69 module will be called sch_hfsc.
70
71config NET_SCH_PRIO
72 tristate "Multi Band Priority Queueing (PRIO)"
73 help
74 Say Y here if you want to use an n-band priority queue packet
75 scheduler.
76
77 To compile this code as a module, choose M here: the
78 module will be called sch_prio.
79
80config NET_SCH_MULTIQ
81 tristate "Hardware Multiqueue-aware Multi Band Queuing (MULTIQ)"
82 help
83 Say Y here if you want to use an n-band queue packet scheduler
84 to support devices that have multiple hardware transmit queues.
85
86 To compile this code as a module, choose M here: the
87 module will be called sch_multiq.
88
89config NET_SCH_RED
90 tristate "Random Early Detection (RED)"
91 help
92 Say Y here if you want to use the Random Early Detection (RED)
93 packet scheduling algorithm.
94
95 See the top of <file:net/sched/sch_red.c> for more details.
96
97 To compile this code as a module, choose M here: the
98 module will be called sch_red.
99
100config NET_SCH_SFB
101 tristate "Stochastic Fair Blue (SFB)"
102 help
103 Say Y here if you want to use the Stochastic Fair Blue (SFB)
104 packet scheduling algorithm.
105
106 See the top of <file:net/sched/sch_sfb.c> for more details.
107
108 To compile this code as a module, choose M here: the
109 module will be called sch_sfb.
110
111config NET_SCH_SFQ
112 tristate "Stochastic Fairness Queueing (SFQ)"
113 help
114 Say Y here if you want to use the Stochastic Fairness Queueing (SFQ)
115 packet scheduling algorithm.
116
117 See the top of <file:net/sched/sch_sfq.c> for more details.
118
119 To compile this code as a module, choose M here: the
120 module will be called sch_sfq.
121
122config NET_SCH_TEQL
123 tristate "True Link Equalizer (TEQL)"
124 help
125 Say Y here if you want to use the True Link Equalizer (TLE) packet
126 scheduling algorithm. This queueing discipline allows the combination
127 of several physical devices into one virtual device.
128
129 See the top of <file:net/sched/sch_teql.c> for more details.
130
131 To compile this code as a module, choose M here: the
132 module will be called sch_teql.
133
134config NET_SCH_TBF
135 tristate "Token Bucket Filter (TBF)"
136 help
137 Say Y here if you want to use the Token Bucket Filter (TBF) packet
138 scheduling algorithm.
139
140 See the top of <file:net/sched/sch_tbf.c> for more details.
141
142 To compile this code as a module, choose M here: the
143 module will be called sch_tbf.
144
145config NET_SCH_CBS
146 tristate "Credit Based Shaper (CBS)"
147 help
148 Say Y here if you want to use the Credit Based Shaper (CBS) packet
149 scheduling algorithm.
150
151 See the top of <file:net/sched/sch_cbs.c> for more details.
152
153 To compile this code as a module, choose M here: the
154 module will be called sch_cbs.
155
156config NET_SCH_ETF
157 tristate "Earliest TxTime First (ETF)"
158 help
159 Say Y here if you want to use the Earliest TxTime First (ETF) packet
160 scheduling algorithm.
161
162 See the top of <file:net/sched/sch_etf.c> for more details.
163
164 To compile this code as a module, choose M here: the
165 module will be called sch_etf.
166
167config NET_SCH_MQPRIO_LIB
168 tristate
169 help
170 Common library for manipulating mqprio queue configurations.
171
172config NET_SCH_TAPRIO
173 tristate "Time Aware Priority (taprio) Scheduler"
174 select NET_SCH_MQPRIO_LIB
175 help
176 Say Y here if you want to use the Time Aware Priority (taprio) packet
177 scheduling algorithm.
178
179 See the top of <file:net/sched/sch_taprio.c> for more details.
180
181 To compile this code as a module, choose M here: the
182 module will be called sch_taprio.
183
184config NET_SCH_GRED
185 tristate "Generic Random Early Detection (GRED)"
186 help
187 Say Y here if you want to use the Generic Random Early Detection
188 (GRED) packet scheduling algorithm for some of your network devices
189 (see the top of <file:net/sched/sch_red.c> for details and
190 references about the algorithm).
191
192 To compile this code as a module, choose M here: the
193 module will be called sch_gred.
194
195config NET_SCH_NETEM
196 tristate "Network emulator (NETEM)"
197 help
198 Say Y if you want to emulate network delay, loss, and packet
199 re-ordering. This is often useful to simulate networks when
200 testing applications or protocols.
201
202 To compile this driver as a module, choose M here: the module
203 will be called sch_netem.
204
205 If unsure, say N.
206
207config NET_SCH_DRR
208 tristate "Deficit Round Robin scheduler (DRR)"
209 help
210 Say Y here if you want to use the Deficit Round Robin (DRR) packet
211 scheduling algorithm.
212
213 To compile this driver as a module, choose M here: the module
214 will be called sch_drr.
215
216 If unsure, say N.
217
218config NET_SCH_MQPRIO
219 tristate "Multi-queue priority scheduler (MQPRIO)"
220 select NET_SCH_MQPRIO_LIB
221 help
222 Say Y here if you want to use the Multi-queue Priority scheduler.
223 This scheduler allows QOS to be offloaded on NICs that have support
224 for offloading QOS schedulers.
225
226 To compile this driver as a module, choose M here: the module will
227 be called sch_mqprio.
228
229 If unsure, say N.
230
231config NET_SCH_SKBPRIO
232 tristate "SKB priority queue scheduler (SKBPRIO)"
233 help
234 Say Y here if you want to use the SKB priority queue
235 scheduler. This schedules packets according to skb->priority,
236 which is useful for request packets in DoS mitigation systems such
237 as Gatekeeper.
238
239 To compile this driver as a module, choose M here: the module will
240 be called sch_skbprio.
241
242 If unsure, say N.
243
244config NET_SCH_CHOKE
245 tristate "CHOose and Keep responsive flow scheduler (CHOKE)"
246 help
247 Say Y here if you want to use the CHOKe packet scheduler (CHOose
248 and Keep for responsive flows, CHOose and Kill for unresponsive
249 flows). This is a variation of RED which tries to penalize flows
250 that monopolize the queue.
251
252 To compile this code as a module, choose M here: the
253 module will be called sch_choke.
254
255config NET_SCH_QFQ
256 tristate "Quick Fair Queueing scheduler (QFQ)"
257 help
258 Say Y here if you want to use the Quick Fair Queueing Scheduler (QFQ)
259 packet scheduling algorithm.
260
261 To compile this driver as a module, choose M here: the module
262 will be called sch_qfq.
263
264 If unsure, say N.
265
266config NET_SCH_CODEL
267 tristate "Controlled Delay AQM (CODEL)"
268 help
269 Say Y here if you want to use the Controlled Delay (CODEL)
270 packet scheduling algorithm.
271
272 To compile this driver as a module, choose M here: the module
273 will be called sch_codel.
274
275 If unsure, say N.
276
277config NET_SCH_FQ_CODEL
278 tristate "Fair Queue Controlled Delay AQM (FQ_CODEL)"
279 help
280 Say Y here if you want to use the FQ Controlled Delay (FQ_CODEL)
281 packet scheduling algorithm.
282
283 To compile this driver as a module, choose M here: the module
284 will be called sch_fq_codel.
285
286 If unsure, say N.
287
288config NET_SCH_CAKE
289 tristate "Common Applications Kept Enhanced (CAKE)"
290 help
291 Say Y here if you want to use the Common Applications Kept Enhanced
292 (CAKE) queue management algorithm.
293
294 To compile this driver as a module, choose M here: the module
295 will be called sch_cake.
296
297 If unsure, say N.
298
299config NET_SCH_FQ
300 tristate "Fair Queue"
301 help
302 Say Y here if you want to use the FQ packet scheduling algorithm.
303
304 FQ does flow separation, and is able to respect pacing requirements
305 set by TCP stack into sk->sk_pacing_rate (for locally generated
306 traffic)
307
308 To compile this driver as a module, choose M here: the module
309 will be called sch_fq.
310
311 If unsure, say N.
312
313config NET_SCH_HHF
314 tristate "Heavy-Hitter Filter (HHF)"
315 help
316 Say Y here if you want to use the Heavy-Hitter Filter (HHF)
317 packet scheduling algorithm.
318
319 To compile this driver as a module, choose M here: the module
320 will be called sch_hhf.
321
322config NET_SCH_PIE
323 tristate "Proportional Integral controller Enhanced (PIE) scheduler"
324 help
325 Say Y here if you want to use the Proportional Integral controller
326 Enhanced scheduler packet scheduling algorithm.
327 For more information, please see https://tools.ietf.org/html/rfc8033
328
329 To compile this driver as a module, choose M here: the module
330 will be called sch_pie.
331
332 If unsure, say N.
333
334config NET_SCH_FQ_PIE
335 depends on NET_SCH_PIE
336 tristate "Flow Queue Proportional Integral controller Enhanced (FQ-PIE)"
337 help
338 Say Y here if you want to use the Flow Queue Proportional Integral
339 controller Enhanced (FQ-PIE) packet scheduling algorithm.
340 For more information, please see https://tools.ietf.org/html/rfc8033
341
342 To compile this driver as a module, choose M here: the module
343 will be called sch_fq_pie.
344
345 If unsure, say N.
346
347config NET_SCH_INGRESS
348 tristate "Ingress/classifier-action Qdisc"
349 depends on NET_CLS_ACT
350 select NET_INGRESS
351 select NET_EGRESS
352 help
353 Say Y here if you want to use classifiers for incoming and/or outgoing
354 packets. This qdisc doesn't do anything else besides running classifiers,
355 which can also have actions attached to them. In case of outgoing packets,
356 classifiers that this qdisc holds are executed in the transmit path
357 before real enqueuing to an egress qdisc happens.
358
359 If unsure, say Y.
360
361 To compile this code as a module, choose M here: the module will be
362 called sch_ingress with alias of sch_clsact.
363
364config NET_SCH_PLUG
365 tristate "Plug network traffic until release (PLUG)"
366 help
367
368 This queuing discipline allows userspace to plug/unplug a network
369 output queue, using the netlink interface. When it receives an
370 enqueue command it inserts a plug into the outbound queue that
371 causes following packets to enqueue until a dequeue command arrives
372 over netlink, causing the plug to be removed and resuming the normal
373 packet flow.
374
375 This module also provides a generic "network output buffering"
376 functionality (aka output commit), wherein upon arrival of a dequeue
377 command, only packets up to the first plug are released for delivery.
378 The Remus HA project uses this module to enable speculative execution
379 of virtual machines by allowing the generated network output to be rolled
380 back if needed.
381
382 For more information, please refer to <http://wiki.xenproject.org/wiki/Remus>
383
384 Say Y here if you are using this kernel for Xen dom0 and
385 want to protect Xen guests with Remus.
386
387 To compile this code as a module, choose M here: the
388 module will be called sch_plug.
389
390config NET_SCH_ETS
391 tristate "Enhanced transmission selection scheduler (ETS)"
392 help
393 The Enhanced Transmission Selection scheduler is a classful
394 queuing discipline that merges functionality of PRIO and DRR
395 qdiscs in one scheduler. ETS makes it easy to configure a set of
396 strict and bandwidth-sharing bands to implement the transmission
397 selection described in 802.1Qaz.
398
399 Say Y here if you want to use the ETS packet scheduling
400 algorithm.
401
402 To compile this driver as a module, choose M here: the module
403 will be called sch_ets.
404
405 If unsure, say N.
406
407menuconfig NET_SCH_DEFAULT
408 bool "Allow override default queue discipline"
409 help
410 Support for selection of default queuing discipline.
411
412 Nearly all users can safely say no here, and the default
413 of pfifo_fast will be used. Many distributions already set
414 the default value via /proc/sys/net/core/default_qdisc.
415
416 If unsure, say N.
417
418if NET_SCH_DEFAULT
419
420choice
421 prompt "Default queuing discipline"
422 default DEFAULT_PFIFO_FAST
423 help
424 Select the queueing discipline that will be used by default
425 for all network devices.
426
427 config DEFAULT_FQ
428 bool "Fair Queue" if NET_SCH_FQ
429
430 config DEFAULT_CODEL
431 bool "Controlled Delay" if NET_SCH_CODEL
432
433 config DEFAULT_FQ_CODEL
434 bool "Fair Queue Controlled Delay" if NET_SCH_FQ_CODEL
435
436 config DEFAULT_FQ_PIE
437 bool "Flow Queue Proportional Integral controller Enhanced" if NET_SCH_FQ_PIE
438
439 config DEFAULT_SFQ
440 bool "Stochastic Fair Queue" if NET_SCH_SFQ
441
442 config DEFAULT_PFIFO_FAST
443 bool "Priority FIFO Fast"
444endchoice
445
446config DEFAULT_NET_SCH
447 string
448 default "pfifo_fast" if DEFAULT_PFIFO_FAST
449 default "fq" if DEFAULT_FQ
450 default "fq_codel" if DEFAULT_FQ_CODEL
451 default "fq_pie" if DEFAULT_FQ_PIE
452 default "sfq" if DEFAULT_SFQ
453 default "pfifo_fast"
454endif
455
456comment "Classification"
457
458config NET_CLS
459 bool
460
461config NET_CLS_BASIC
462 tristate "Elementary classification (BASIC)"
463 select NET_CLS
464 help
465 Say Y here if you want to be able to classify packets using
466 only extended matches and actions.
467
468 To compile this code as a module, choose M here: the
469 module will be called cls_basic.
470
471config NET_CLS_ROUTE4
472 tristate "Routing decision (ROUTE)"
473 depends on INET
474 select IP_ROUTE_CLASSID
475 select NET_CLS
476 help
477 If you say Y here, you will be able to classify packets
478 according to the route table entry they matched.
479
480 To compile this code as a module, choose M here: the
481 module will be called cls_route.
482
483config NET_CLS_FW
484 tristate "Netfilter mark (FW)"
485 select NET_CLS
486 help
487 If you say Y here, you will be able to classify packets
488 according to netfilter/firewall marks.
489
490 To compile this code as a module, choose M here: the
491 module will be called cls_fw.
492
493config NET_CLS_U32
494 tristate "Universal 32bit comparisons w/ hashing (U32)"
495 select NET_CLS
496 help
497 Say Y here to be able to classify packets using a universal
498 32bit pieces based comparison scheme.
499
500 To compile this code as a module, choose M here: the
501 module will be called cls_u32.
502
503config CLS_U32_PERF
504 bool "Performance counters support"
505 depends on NET_CLS_U32
506 help
507 Say Y here to make u32 gather additional statistics useful for
508 fine tuning u32 classifiers.
509
510config CLS_U32_MARK
511 bool "Netfilter marks support"
512 depends on NET_CLS_U32
513 help
514 Say Y here to be able to use netfilter marks as u32 key.
515
516config NET_CLS_FLOW
517 tristate "Flow classifier"
518 select NET_CLS
519 help
520 If you say Y here, you will be able to classify packets based on
521 a configurable combination of packet keys. This is mostly useful
522 in combination with SFQ.
523
524 To compile this code as a module, choose M here: the
525 module will be called cls_flow.
526
527config NET_CLS_CGROUP
528 tristate "Control Group Classifier"
529 select NET_CLS
530 select CGROUP_NET_CLASSID
531 depends on CGROUPS
532 help
533 Say Y here if you want to classify packets based on the control
534 cgroup of their process.
535
536 To compile this code as a module, choose M here: the
537 module will be called cls_cgroup.
538
539config NET_CLS_BPF
540 tristate "BPF-based classifier"
541 select NET_CLS
542 help
543 If you say Y here, you will be able to classify packets based on
544 programmable BPF (JIT'ed) filters as an alternative to ematches.
545
546 To compile this code as a module, choose M here: the module will
547 be called cls_bpf.
548
549config NET_CLS_FLOWER
550 tristate "Flower classifier"
551 select NET_CLS
552 help
553 If you say Y here, you will be able to classify packets based on
554 a configurable combination of packet keys and masks.
555
556 To compile this code as a module, choose M here: the module will
557 be called cls_flower.
558
559config NET_CLS_MATCHALL
560 tristate "Match-all classifier"
561 select NET_CLS
562 help
563 If you say Y here, you will be able to classify packets based on
564 nothing. Every packet will match.
565
566 To compile this code as a module, choose M here: the module will
567 be called cls_matchall.
568
569config NET_EMATCH
570 bool "Extended Matches"
571 select NET_CLS
572 help
573 Say Y here if you want to use extended matches on top of classifiers
574 and select the extended matches below.
575
576 Extended matches are small classification helpers not worth writing
577 a separate classifier for.
578
579 A recent version of the iproute2 package is required to use
580 extended matches.
581
582config NET_EMATCH_STACK
583 int "Stack size"
584 depends on NET_EMATCH
585 default "32"
586 help
587 Size of the local stack variable used while evaluating the tree of
588 ematches. Limits the depth of the tree, i.e. the number of
589 encapsulated precedences. Every level requires 4 bytes of additional
590 stack space.
591
592config NET_EMATCH_CMP
593 tristate "Simple packet data comparison"
594 depends on NET_EMATCH
595 help
596 Say Y here if you want to be able to classify packets based on
597 simple packet data comparisons for 8, 16, and 32bit values.
598
599 To compile this code as a module, choose M here: the
600 module will be called em_cmp.
601
602config NET_EMATCH_NBYTE
603 tristate "Multi byte comparison"
604 depends on NET_EMATCH
605 help
606 Say Y here if you want to be able to classify packets based on
607 multiple byte comparisons mainly useful for IPv6 address comparisons.
608
609 To compile this code as a module, choose M here: the
610 module will be called em_nbyte.
611
612config NET_EMATCH_U32
613 tristate "U32 key"
614 depends on NET_EMATCH
615 help
616 Say Y here if you want to be able to classify packets using
617 the famous u32 key in combination with logic relations.
618
619 To compile this code as a module, choose M here: the
620 module will be called em_u32.
621
622config NET_EMATCH_META
623 tristate "Metadata"
624 depends on NET_EMATCH
625 help
626 Say Y here if you want to be able to classify packets based on
627 metadata such as load average, netfilter attributes, socket
628 attributes and routing decisions.
629
630 To compile this code as a module, choose M here: the
631 module will be called em_meta.
632
633config NET_EMATCH_TEXT
634 tristate "Textsearch"
635 depends on NET_EMATCH
636 select TEXTSEARCH
637 select TEXTSEARCH_KMP
638 select TEXTSEARCH_BM
639 select TEXTSEARCH_FSM
640 help
641 Say Y here if you want to be able to classify packets based on
642 textsearch comparisons.
643
644 To compile this code as a module, choose M here: the
645 module will be called em_text.
646
647config NET_EMATCH_CANID
648 tristate "CAN Identifier"
649 depends on NET_EMATCH && (CAN=y || CAN=m)
650 help
651 Say Y here if you want to be able to classify CAN frames based
652 on CAN Identifier.
653
654 To compile this code as a module, choose M here: the
655 module will be called em_canid.
656
657config NET_EMATCH_IPSET
658 tristate "IPset"
659 depends on NET_EMATCH && IP_SET
660 help
661 Say Y here if you want to be able to classify packets based on
662 ipset membership.
663
664 To compile this code as a module, choose M here: the
665 module will be called em_ipset.
666
667config NET_EMATCH_IPT
668 tristate "IPtables Matches"
669 depends on NET_EMATCH && NETFILTER && NETFILTER_XTABLES
670 help
671 Say Y here to be able to classify packets based on iptables
672 matches.
673 Current supported match is "policy" which allows packet classification
674 based on IPsec policy that was used during decapsulation
675
676 To compile this code as a module, choose M here: the
677 module will be called em_ipt.
678
679config NET_CLS_ACT
680 bool "Actions"
681 select NET_CLS
682 help
683 Say Y here if you want to use traffic control actions. Actions
684 get attached to classifiers and are invoked after a successful
685 classification. They are used to overwrite the classification
686 result, instantly drop or redirect packets, etc.
687
688 A recent version of the iproute2 package is required to use
689 extended matches.
690
691config NET_ACT_POLICE
692 tristate "Traffic Policing"
693 depends on NET_CLS_ACT
694 help
695 Say Y here if you want to do traffic policing, i.e. strict
696 bandwidth limiting. This action replaces the existing policing
697 module.
698
699 To compile this code as a module, choose M here: the
700 module will be called act_police.
701
702config NET_ACT_GACT
703 tristate "Generic actions"
704 depends on NET_CLS_ACT
705 help
706 Say Y here to take generic actions such as dropping and
707 accepting packets.
708
709 To compile this code as a module, choose M here: the
710 module will be called act_gact.
711
712config GACT_PROB
713 bool "Probability support"
714 depends on NET_ACT_GACT
715 help
716 Say Y here to use the generic action randomly or deterministically.
717
718config NET_ACT_MIRRED
719 tristate "Redirecting and Mirroring"
720 depends on NET_CLS_ACT
721 help
722 Say Y here to allow packets to be mirrored or redirected to
723 other devices.
724
725 To compile this code as a module, choose M here: the
726 module will be called act_mirred.
727
728config NET_ACT_SAMPLE
729 tristate "Traffic Sampling"
730 depends on NET_CLS_ACT
731 select PSAMPLE
732 help
733 Say Y here to allow packet sampling tc action. The packet sample
734 action consists of statistically choosing packets and sampling
735 them using the psample module.
736
737 To compile this code as a module, choose M here: the
738 module will be called act_sample.
739
740config NET_ACT_IPT
741 tristate "IPtables targets"
742 depends on NET_CLS_ACT && NETFILTER && NETFILTER_XTABLES
743 help
744 Say Y here to be able to invoke iptables targets after successful
745 classification.
746
747 To compile this code as a module, choose M here: the
748 module will be called act_ipt.
749
750config NET_ACT_NAT
751 tristate "Stateless NAT"
752 depends on NET_CLS_ACT
753 help
754 Say Y here to do stateless NAT on IPv4 packets. You should use
755 netfilter for NAT unless you know what you are doing.
756
757 To compile this code as a module, choose M here: the
758 module will be called act_nat.
759
760config NET_ACT_PEDIT
761 tristate "Packet Editing"
762 depends on NET_CLS_ACT
763 help
764 Say Y here if you want to mangle the content of packets.
765
766 To compile this code as a module, choose M here: the
767 module will be called act_pedit.
768
769config NET_ACT_SIMP
770 tristate "Simple Example (Debug)"
771 depends on NET_CLS_ACT
772 help
773 Say Y here to add a simple action for demonstration purposes.
774 It is meant as an example and for debugging purposes. It will
775 print a configured policy string followed by the packet count
776 to the console for every packet that passes by.
777
778 If unsure, say N.
779
780 To compile this code as a module, choose M here: the
781 module will be called act_simple.
782
783config NET_ACT_SKBEDIT
784 tristate "SKB Editing"
785 depends on NET_CLS_ACT
786 help
787 Say Y here to change skb priority or queue_mapping settings.
788
789 If unsure, say N.
790
791 To compile this code as a module, choose M here: the
792 module will be called act_skbedit.
793
794config NET_ACT_CSUM
795 tristate "Checksum Updating"
796 depends on NET_CLS_ACT && INET
797 select LIBCRC32C
798 help
799 Say Y here to update some common checksum after some direct
800 packet alterations.
801
802 To compile this code as a module, choose M here: the
803 module will be called act_csum.
804
805config NET_ACT_MPLS
806 tristate "MPLS manipulation"
807 depends on NET_CLS_ACT
808 help
809 Say Y here to push or pop MPLS headers.
810
811 If unsure, say N.
812
813 To compile this code as a module, choose M here: the
814 module will be called act_mpls.
815
816config NET_ACT_VLAN
817 tristate "Vlan manipulation"
818 depends on NET_CLS_ACT
819 help
820 Say Y here to push or pop vlan headers.
821
822 If unsure, say N.
823
824 To compile this code as a module, choose M here: the
825 module will be called act_vlan.
826
827config NET_ACT_BPF
828 tristate "BPF based action"
829 depends on NET_CLS_ACT
830 help
831 Say Y here to execute BPF code on packets. The BPF code will decide
832 if the packet should be dropped or not.
833
834 If unsure, say N.
835
836 To compile this code as a module, choose M here: the
837 module will be called act_bpf.
838
839config NET_ACT_CONNMARK
840 tristate "Netfilter Connection Mark Retriever"
841 depends on NET_CLS_ACT && NETFILTER
842 depends on NF_CONNTRACK && NF_CONNTRACK_MARK
843 help
844 Say Y here to allow retrieving of conn mark
845
846 If unsure, say N.
847
848 To compile this code as a module, choose M here: the
849 module will be called act_connmark.
850
851config NET_ACT_CTINFO
852 tristate "Netfilter Connection Mark Actions"
853 depends on NET_CLS_ACT && NETFILTER
854 depends on NF_CONNTRACK && NF_CONNTRACK_MARK
855 help
856 Say Y here to allow transfer of a connmark stored information.
857 Current actions transfer connmark stored DSCP into
858 ipv4/v6 diffserv and/or to transfer connmark to packet
859 mark. Both are useful for restoring egress based marks
860 back onto ingress connections for qdisc priority mapping
861 purposes.
862
863 If unsure, say N.
864
865 To compile this code as a module, choose M here: the
866 module will be called act_ctinfo.
867
868config NET_ACT_SKBMOD
869 tristate "skb data modification action"
870 depends on NET_CLS_ACT
871 help
872 Say Y here to allow modification of skb data
873
874 If unsure, say N.
875
876 To compile this code as a module, choose M here: the
877 module will be called act_skbmod.
878
879config NET_ACT_IFE
880 tristate "Inter-FE action based on IETF ForCES InterFE LFB"
881 depends on NET_CLS_ACT
882 select NET_IFE
883 help
884 Say Y here to allow for sourcing and terminating metadata
885 For details refer to netdev01 paper:
886 "Distributing Linux Traffic Control Classifier-Action Subsystem"
887 Authors: Jamal Hadi Salim and Damascene M. Joachimpillai
888
889 To compile this code as a module, choose M here: the
890 module will be called act_ife.
891
892config NET_ACT_TUNNEL_KEY
893 tristate "IP tunnel metadata manipulation"
894 depends on NET_CLS_ACT
895 help
896 Say Y here to set/release ip tunnel metadata.
897
898 If unsure, say N.
899
900 To compile this code as a module, choose M here: the
901 module will be called act_tunnel_key.
902
903config NET_ACT_CT
904 tristate "connection tracking tc action"
905 depends on NET_CLS_ACT && NF_CONNTRACK && (!NF_NAT || NF_NAT) && NF_FLOW_TABLE
906 select NF_CONNTRACK_OVS
907 select NF_NAT_OVS if NF_NAT
908 help
909 Say Y here to allow sending the packets to conntrack module.
910
911 If unsure, say N.
912
913 To compile this code as a module, choose M here: the
914 module will be called act_ct.
915
916config NET_ACT_GATE
917 tristate "Frame gate entry list control tc action"
918 depends on NET_CLS_ACT
919 help
920 Say Y here to allow to control the ingress flow to be passed at
921 specific time slot and be dropped at other specific time slot by
922 the gate entry list.
923
924 If unsure, say N.
925 To compile this code as a module, choose M here: the
926 module will be called act_gate.
927
928config NET_IFE_SKBMARK
929 tristate "Support to encoding decoding skb mark on IFE action"
930 depends on NET_ACT_IFE
931
932config NET_IFE_SKBPRIO
933 tristate "Support to encoding decoding skb prio on IFE action"
934 depends on NET_ACT_IFE
935
936config NET_IFE_SKBTCINDEX
937 tristate "Support to encoding decoding skb tcindex on IFE action"
938 depends on NET_ACT_IFE
939
940config NET_TC_SKB_EXT
941 bool "TC recirculation support"
942 depends on NET_CLS_ACT
943 select SKB_EXTENSIONS
944
945 help
946 Say Y here to allow tc chain misses to continue in OvS datapath in
947 the correct recirc_id, and hardware chain misses to continue in
948 the correct chain in tc software datapath.
949
950 Say N here if you won't be using tc<->ovs offload or tc chains offload.
951
952endif # NET_SCHED
953
954config NET_SCH_FIFO
955 bool