Loading...
1# SPDX-License-Identifier: GPL-2.0-only
2menuconfig IP_SET
3 tristate "IP set support"
4 depends on INET && NETFILTER
5 select NETFILTER_NETLINK
6 help
7 This option adds IP set support to the kernel.
8 In order to define and use the sets, you need the userspace utility
9 ipset(8). You can use the sets in netfilter via the "set" match
10 and "SET" target.
11
12 To compile it as a module, choose M here. If unsure, say N.
13
14if IP_SET
15
16config IP_SET_MAX
17 int "Maximum number of IP sets"
18 default 256
19 range 2 65534
20 depends on IP_SET
21 help
22 You can define here default value of the maximum number
23 of IP sets for the kernel.
24
25 The value can be overridden by the 'max_sets' module
26 parameter of the 'ip_set' module.
27
28config IP_SET_BITMAP_IP
29 tristate "bitmap:ip set support"
30 depends on IP_SET
31 help
32 This option adds the bitmap:ip set type support, by which one
33 can store IPv4 addresses (or network addresse) from a range.
34
35 To compile it as a module, choose M here. If unsure, say N.
36
37config IP_SET_BITMAP_IPMAC
38 tristate "bitmap:ip,mac set support"
39 depends on IP_SET
40 help
41 This option adds the bitmap:ip,mac set type support, by which one
42 can store IPv4 address and (source) MAC address pairs from a range.
43
44 To compile it as a module, choose M here. If unsure, say N.
45
46config IP_SET_BITMAP_PORT
47 tristate "bitmap:port set support"
48 depends on IP_SET
49 help
50 This option adds the bitmap:port set type support, by which one
51 can store TCP/UDP port numbers from a range.
52
53 To compile it as a module, choose M here. If unsure, say N.
54
55config IP_SET_HASH_IP
56 tristate "hash:ip set support"
57 depends on IP_SET
58 help
59 This option adds the hash:ip set type support, by which one
60 can store arbitrary IPv4 or IPv6 addresses (or network addresses)
61 in a set.
62
63 To compile it as a module, choose M here. If unsure, say N.
64
65config IP_SET_HASH_IPMARK
66 tristate "hash:ip,mark set support"
67 depends on IP_SET
68 help
69 This option adds the hash:ip,mark set type support, by which one
70 can store IPv4/IPv6 address and mark pairs.
71
72 To compile it as a module, choose M here. If unsure, say N.
73
74config IP_SET_HASH_IPPORT
75 tristate "hash:ip,port set support"
76 depends on IP_SET
77 help
78 This option adds the hash:ip,port set type support, by which one
79 can store IPv4/IPv6 address and protocol/port pairs.
80
81 To compile it as a module, choose M here. If unsure, say N.
82
83config IP_SET_HASH_IPPORTIP
84 tristate "hash:ip,port,ip set support"
85 depends on IP_SET
86 help
87 This option adds the hash:ip,port,ip set type support, by which
88 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
89 address triples in a set.
90
91 To compile it as a module, choose M here. If unsure, say N.
92
93config IP_SET_HASH_IPPORTNET
94 tristate "hash:ip,port,net set support"
95 depends on IP_SET
96 help
97 This option adds the hash:ip,port,net set type support, by which
98 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
99 network address/prefix triples in a set.
100
101 To compile it as a module, choose M here. If unsure, say N.
102
103config IP_SET_HASH_IPMAC
104 tristate "hash:ip,mac set support"
105 depends on IP_SET
106 help
107 This option adds the hash:ip,mac set type support, by which
108 one can store IPv4/IPv6 address and MAC (ethernet address) pairs in a set.
109
110 To compile it as a module, choose M here. If unsure, say N.
111
112config IP_SET_HASH_MAC
113 tristate "hash:mac set support"
114 depends on IP_SET
115 help
116 This option adds the hash:mac set type support, by which
117 one can store MAC (ethernet address) elements in a set.
118
119 To compile it as a module, choose M here. If unsure, say N.
120
121config IP_SET_HASH_NETPORTNET
122 tristate "hash:net,port,net set support"
123 depends on IP_SET
124 help
125 This option adds the hash:net,port,net set type support, by which
126 one can store two IPv4/IPv6 subnets, and a protocol/port in a set.
127
128 To compile it as a module, choose M here. If unsure, say N.
129
130config IP_SET_HASH_NET
131 tristate "hash:net set support"
132 depends on IP_SET
133 help
134 This option adds the hash:net set type support, by which
135 one can store IPv4/IPv6 network address/prefix elements in a set.
136
137 To compile it as a module, choose M here. If unsure, say N.
138
139config IP_SET_HASH_NETNET
140 tristate "hash:net,net set support"
141 depends on IP_SET
142 help
143 This option adds the hash:net,net set type support, by which
144 one can store IPv4/IPv6 network address/prefix pairs in a set.
145
146 To compile it as a module, choose M here. If unsure, say N.
147
148config IP_SET_HASH_NETPORT
149 tristate "hash:net,port set support"
150 depends on IP_SET
151 help
152 This option adds the hash:net,port set type support, by which
153 one can store IPv4/IPv6 network address/prefix and
154 protocol/port pairs as elements in a set.
155
156 To compile it as a module, choose M here. If unsure, say N.
157
158config IP_SET_HASH_NETIFACE
159 tristate "hash:net,iface set support"
160 depends on IP_SET
161 help
162 This option adds the hash:net,iface set type support, by which
163 one can store IPv4/IPv6 network address/prefix and
164 interface name pairs as elements in a set.
165
166 To compile it as a module, choose M here. If unsure, say N.
167
168config IP_SET_LIST_SET
169 tristate "list:set set support"
170 depends on IP_SET
171 help
172 This option adds the list:set set type support. In this
173 kind of set one can store the name of other sets and it forms
174 an ordered union of the member sets.
175
176 To compile it as a module, choose M here. If unsure, say N.
177
178endif # IP_SET
1menuconfig IP_SET
2 tristate "IP set support"
3 depends on INET && NETFILTER
4 depends on NETFILTER_NETLINK
5 help
6 This option adds IP set support to the kernel.
7 In order to define and use the sets, you need the userspace utility
8 ipset(8). You can use the sets in netfilter via the "set" match
9 and "SET" target.
10
11 To compile it as a module, choose M here. If unsure, say N.
12
13if IP_SET
14
15config IP_SET_MAX
16 int "Maximum number of IP sets"
17 default 256
18 range 2 65534
19 depends on IP_SET
20 help
21 You can define here default value of the maximum number
22 of IP sets for the kernel.
23
24 The value can be overriden by the 'max_sets' module
25 parameter of the 'ip_set' module.
26
27config IP_SET_BITMAP_IP
28 tristate "bitmap:ip set support"
29 depends on IP_SET
30 help
31 This option adds the bitmap:ip set type support, by which one
32 can store IPv4 addresses (or network addresse) from a range.
33
34 To compile it as a module, choose M here. If unsure, say N.
35
36config IP_SET_BITMAP_IPMAC
37 tristate "bitmap:ip,mac set support"
38 depends on IP_SET
39 help
40 This option adds the bitmap:ip,mac set type support, by which one
41 can store IPv4 address and (source) MAC address pairs from a range.
42
43 To compile it as a module, choose M here. If unsure, say N.
44
45config IP_SET_BITMAP_PORT
46 tristate "bitmap:port set support"
47 depends on IP_SET
48 help
49 This option adds the bitmap:port set type support, by which one
50 can store TCP/UDP port numbers from a range.
51
52 To compile it as a module, choose M here. If unsure, say N.
53
54config IP_SET_HASH_IP
55 tristate "hash:ip set support"
56 depends on IP_SET
57 help
58 This option adds the hash:ip set type support, by which one
59 can store arbitrary IPv4 or IPv6 addresses (or network addresses)
60 in a set.
61
62 To compile it as a module, choose M here. If unsure, say N.
63
64config IP_SET_HASH_IPPORT
65 tristate "hash:ip,port set support"
66 depends on IP_SET
67 help
68 This option adds the hash:ip,port set type support, by which one
69 can store IPv4/IPv6 address and protocol/port pairs.
70
71 To compile it as a module, choose M here. If unsure, say N.
72
73config IP_SET_HASH_IPPORTIP
74 tristate "hash:ip,port,ip set support"
75 depends on IP_SET
76 help
77 This option adds the hash:ip,port,ip set type support, by which
78 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
79 address triples in a set.
80
81 To compile it as a module, choose M here. If unsure, say N.
82
83config IP_SET_HASH_IPPORTNET
84 tristate "hash:ip,port,net set support"
85 depends on IP_SET
86 help
87 This option adds the hash:ip,port,net set type support, by which
88 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
89 network address/prefix triples in a set.
90
91 To compile it as a module, choose M here. If unsure, say N.
92
93config IP_SET_HASH_NET
94 tristate "hash:net set support"
95 depends on IP_SET
96 help
97 This option adds the hash:net set type support, by which
98 one can store IPv4/IPv6 network address/prefix elements in a set.
99
100 To compile it as a module, choose M here. If unsure, say N.
101
102config IP_SET_HASH_NETPORT
103 tristate "hash:net,port set support"
104 depends on IP_SET
105 help
106 This option adds the hash:net,port set type support, by which
107 one can store IPv4/IPv6 network address/prefix and
108 protocol/port pairs as elements in a set.
109
110 To compile it as a module, choose M here. If unsure, say N.
111
112config IP_SET_HASH_NETIFACE
113 tristate "hash:net,iface set support"
114 depends on IP_SET
115 help
116 This option adds the hash:net,iface set type support, by which
117 one can store IPv4/IPv6 network address/prefix and
118 interface name pairs as elements in a set.
119
120 To compile it as a module, choose M here. If unsure, say N.
121
122config IP_SET_LIST_SET
123 tristate "list:set set support"
124 depends on IP_SET
125 help
126 This option adds the list:set set type support. In this
127 kind of set one can store the name of other sets and it forms
128 an ordered union of the member sets.
129
130 To compile it as a module, choose M here. If unsure, say N.
131
132endif # IP_SET