mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/herbert/cryptodev-2.6.git
synced 2026-04-25 00:52:45 -04:00
59c9358349
Modern OSes use iptables implementation with nf_tables as a backend, e.g.: $ iptables -V iptables v1.8.8 (nf_tables) Pablo points out that we need CONFIG_NFT_COMPAT to make that work, otherwise we see a lot of: Warning: Extension DNAT revision 0 not supported, missing kernel module? with DNAT being just an example here, other modules we need include udp, TTL, length etc. Link: https://lore.kernel.org/r/20240126201308.2903602-1-kuba@kernel.org Signed-off-by: Jakub Kicinski <kuba@kernel.org>
90 lines
1.8 KiB
Plaintext
90 lines
1.8 KiB
Plaintext
CONFIG_USER_NS=y
|
|
CONFIG_NET_NS=y
|
|
CONFIG_BONDING=m
|
|
CONFIG_BPF_SYSCALL=y
|
|
CONFIG_TEST_BPF=m
|
|
CONFIG_NUMA=y
|
|
CONFIG_RPS=y
|
|
CONFIG_SYSFS=y
|
|
CONFIG_PROC_SYSCTL=y
|
|
CONFIG_NET_VRF=y
|
|
CONFIG_NET_L3_MASTER_DEV=y
|
|
CONFIG_IPV6=y
|
|
CONFIG_IPV6_MULTIPLE_TABLES=y
|
|
CONFIG_VETH=y
|
|
CONFIG_NET_IPVTI=y
|
|
CONFIG_IPV6_VTI=y
|
|
CONFIG_DUMMY=y
|
|
CONFIG_BRIDGE_VLAN_FILTERING=y
|
|
CONFIG_BRIDGE=y
|
|
CONFIG_CRYPTO_CHACHA20POLY1305=m
|
|
CONFIG_VLAN_8021Q=y
|
|
CONFIG_IFB=y
|
|
CONFIG_INET_DIAG=y
|
|
CONFIG_IP_GRE=m
|
|
CONFIG_NETFILTER=y
|
|
CONFIG_NETFILTER_ADVANCED=y
|
|
CONFIG_NF_CONNTRACK=m
|
|
CONFIG_NF_NAT=m
|
|
CONFIG_IP6_NF_IPTABLES=m
|
|
CONFIG_IP_NF_IPTABLES=m
|
|
CONFIG_IP6_NF_NAT=m
|
|
CONFIG_IP6_NF_RAW=m
|
|
CONFIG_IP_NF_NAT=m
|
|
CONFIG_IP_NF_RAW=m
|
|
CONFIG_IPV6_GRE=m
|
|
CONFIG_IPV6_SEG6_LWTUNNEL=y
|
|
CONFIG_L2TP_ETH=m
|
|
CONFIG_L2TP_IP=m
|
|
CONFIG_L2TP=m
|
|
CONFIG_L2TP_V3=y
|
|
CONFIG_MACSEC=m
|
|
CONFIG_MACVLAN=y
|
|
CONFIG_MACVTAP=y
|
|
CONFIG_MPLS=y
|
|
CONFIG_MPTCP=y
|
|
CONFIG_NF_TABLES=m
|
|
CONFIG_NF_TABLES_IPV6=y
|
|
CONFIG_NF_TABLES_IPV4=y
|
|
CONFIG_NFT_NAT=m
|
|
CONFIG_NETFILTER_XT_MATCH_LENGTH=m
|
|
CONFIG_NET_ACT_CT=m
|
|
CONFIG_NET_ACT_GACT=m
|
|
CONFIG_NET_CLS_BASIC=m
|
|
CONFIG_NET_CLS_BPF=m
|
|
CONFIG_NET_CLS_U32=m
|
|
CONFIG_NET_IPGRE_DEMUX=m
|
|
CONFIG_NET_IPGRE=m
|
|
CONFIG_NET_SCH_FQ_CODEL=m
|
|
CONFIG_NET_SCH_HTB=m
|
|
CONFIG_NET_SCH_FQ=m
|
|
CONFIG_NET_SCH_ETF=m
|
|
CONFIG_NET_SCH_NETEM=y
|
|
CONFIG_NFT_COMPAT=m
|
|
CONFIG_NF_FLOW_TABLE=m
|
|
CONFIG_PSAMPLE=m
|
|
CONFIG_TCP_MD5SIG=y
|
|
CONFIG_TEST_BLACKHOLE_DEV=m
|
|
CONFIG_KALLSYMS=y
|
|
CONFIG_TLS=m
|
|
CONFIG_TRACEPOINTS=y
|
|
CONFIG_NET_DROP_MONITOR=m
|
|
CONFIG_NETDEVSIM=m
|
|
CONFIG_NET_FOU=m
|
|
CONFIG_MPLS_ROUTING=m
|
|
CONFIG_MPLS_IPTUNNEL=m
|
|
CONFIG_NET_SCH_INGRESS=m
|
|
CONFIG_NET_CLS_FLOWER=m
|
|
CONFIG_NET_ACT_TUNNEL_KEY=m
|
|
CONFIG_NET_ACT_MIRRED=m
|
|
CONFIG_BAREUDP=m
|
|
CONFIG_IPV6_IOAM6_LWTUNNEL=y
|
|
CONFIG_CRYPTO_SM4_GENERIC=y
|
|
CONFIG_AMT=m
|
|
CONFIG_TUN=y
|
|
CONFIG_VXLAN=m
|
|
CONFIG_IP_SCTP=m
|
|
CONFIG_NETFILTER_XT_MATCH_POLICY=m
|
|
CONFIG_CRYPTO_ARIA=y
|
|
CONFIG_XFRM_INTERFACE=m
|