12345678910111213141516171819202122232425262728293031323334353637 |
- #
- # XFRM configuration
- #
- config XFRM
- bool
- depends on NET
- config XFRM_USER
- tristate "Transformation user configuration interface"
- depends on INET && XFRM
- ---help---
- Support for Transformation(XFRM) user configuration interface
- like IPsec used by native Linux tools.
- If unsure, say Y.
- config XFRM_SUB_POLICY
- bool "Transformation sub policy support (EXPERIMENTAL)"
- depends on XFRM && EXPERIMENTAL
- ---help---
- Support sub policy for developers. By using sub policy with main
- one, two policies can be applied to the same packet at once.
- Policy which lives shorter time in kernel should be a sub.
- If unsure, say N.
- config NET_KEY
- tristate "PF_KEY sockets"
- select XFRM
- ---help---
- PF_KEYv2 socket family, compatible to KAME ones.
- They are required if you are going to use IPsec tools ported
- from KAME.
- Say Y unless you know what you are doing.
|