Loading...
1# SPDX-License-Identifier: GPL-2.0-only
2menuconfig IP_SET
3 tristate "IP set support"
4 depends on INET && NETFILTER
5 select NETFILTER_NETLINK
6 help
7 This option adds IP set support to the kernel.
8 In order to define and use the sets, you need the userspace utility
9 ipset(8). You can use the sets in netfilter via the "set" match
10 and "SET" target.
11
12 To compile it as a module, choose M here. If unsure, say N.
13
14if IP_SET
15
16config IP_SET_MAX
17 int "Maximum number of IP sets"
18 default 256
19 range 2 65534
20 depends on IP_SET
21 help
22 You can define here default value of the maximum number
23 of IP sets for the kernel.
24
25 The value can be overridden by the 'max_sets' module
26 parameter of the 'ip_set' module.
27
28config IP_SET_BITMAP_IP
29 tristate "bitmap:ip set support"
30 depends on IP_SET
31 help
32 This option adds the bitmap:ip set type support, by which one
33 can store IPv4 addresses (or network addresse) from a range.
34
35 To compile it as a module, choose M here. If unsure, say N.
36
37config IP_SET_BITMAP_IPMAC
38 tristate "bitmap:ip,mac set support"
39 depends on IP_SET
40 help
41 This option adds the bitmap:ip,mac set type support, by which one
42 can store IPv4 address and (source) MAC address pairs from a range.
43
44 To compile it as a module, choose M here. If unsure, say N.
45
46config IP_SET_BITMAP_PORT
47 tristate "bitmap:port set support"
48 depends on IP_SET
49 help
50 This option adds the bitmap:port set type support, by which one
51 can store TCP/UDP port numbers from a range.
52
53 To compile it as a module, choose M here. If unsure, say N.
54
55config IP_SET_HASH_IP
56 tristate "hash:ip set support"
57 depends on IP_SET
58 help
59 This option adds the hash:ip set type support, by which one
60 can store arbitrary IPv4 or IPv6 addresses (or network addresses)
61 in a set.
62
63 To compile it as a module, choose M here. If unsure, say N.
64
65config IP_SET_HASH_IPMARK
66 tristate "hash:ip,mark set support"
67 depends on IP_SET
68 help
69 This option adds the hash:ip,mark set type support, by which one
70 can store IPv4/IPv6 address and mark pairs.
71
72 To compile it as a module, choose M here. If unsure, say N.
73
74config IP_SET_HASH_IPPORT
75 tristate "hash:ip,port set support"
76 depends on IP_SET
77 help
78 This option adds the hash:ip,port set type support, by which one
79 can store IPv4/IPv6 address and protocol/port pairs.
80
81 To compile it as a module, choose M here. If unsure, say N.
82
83config IP_SET_HASH_IPPORTIP
84 tristate "hash:ip,port,ip set support"
85 depends on IP_SET
86 help
87 This option adds the hash:ip,port,ip set type support, by which
88 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
89 address triples in a set.
90
91 To compile it as a module, choose M here. If unsure, say N.
92
93config IP_SET_HASH_IPPORTNET
94 tristate "hash:ip,port,net set support"
95 depends on IP_SET
96 help
97 This option adds the hash:ip,port,net set type support, by which
98 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
99 network address/prefix triples in a set.
100
101 To compile it as a module, choose M here. If unsure, say N.
102
103config IP_SET_HASH_IPMAC
104 tristate "hash:ip,mac set support"
105 depends on IP_SET
106 help
107 This option adds the hash:ip,mac set type support, by which
108 one can store IPv4/IPv6 address and MAC (ethernet address) pairs in a set.
109
110 To compile it as a module, choose M here. If unsure, say N.
111
112config IP_SET_HASH_MAC
113 tristate "hash:mac set support"
114 depends on IP_SET
115 help
116 This option adds the hash:mac set type support, by which
117 one can store MAC (ethernet address) elements in a set.
118
119 To compile it as a module, choose M here. If unsure, say N.
120
121config IP_SET_HASH_NETPORTNET
122 tristate "hash:net,port,net set support"
123 depends on IP_SET
124 help
125 This option adds the hash:net,port,net set type support, by which
126 one can store two IPv4/IPv6 subnets, and a protocol/port in a set.
127
128 To compile it as a module, choose M here. If unsure, say N.
129
130config IP_SET_HASH_NET
131 tristate "hash:net set support"
132 depends on IP_SET
133 help
134 This option adds the hash:net set type support, by which
135 one can store IPv4/IPv6 network address/prefix elements in a set.
136
137 To compile it as a module, choose M here. If unsure, say N.
138
139config IP_SET_HASH_NETNET
140 tristate "hash:net,net set support"
141 depends on IP_SET
142 help
143 This option adds the hash:net,net set type support, by which
144 one can store IPv4/IPv6 network address/prefix pairs in a set.
145
146 To compile it as a module, choose M here. If unsure, say N.
147
148config IP_SET_HASH_NETPORT
149 tristate "hash:net,port set support"
150 depends on IP_SET
151 help
152 This option adds the hash:net,port set type support, by which
153 one can store IPv4/IPv6 network address/prefix and
154 protocol/port pairs as elements in a set.
155
156 To compile it as a module, choose M here. If unsure, say N.
157
158config IP_SET_HASH_NETIFACE
159 tristate "hash:net,iface set support"
160 depends on IP_SET
161 help
162 This option adds the hash:net,iface set type support, by which
163 one can store IPv4/IPv6 network address/prefix and
164 interface name pairs as elements in a set.
165
166 To compile it as a module, choose M here. If unsure, say N.
167
168config IP_SET_LIST_SET
169 tristate "list:set set support"
170 depends on IP_SET
171 help
172 This option adds the list:set set type support. In this
173 kind of set one can store the name of other sets and it forms
174 an ordered union of the member sets.
175
176 To compile it as a module, choose M here. If unsure, say N.
177
178endif # IP_SET
1menuconfig IP_SET
2 tristate "IP set support"
3 depends on INET && NETFILTER
4 select NETFILTER_NETLINK
5 help
6 This option adds IP set support to the kernel.
7 In order to define and use the sets, you need the userspace utility
8 ipset(8). You can use the sets in netfilter via the "set" match
9 and "SET" target.
10
11 To compile it as a module, choose M here. If unsure, say N.
12
13if IP_SET
14
15config IP_SET_MAX
16 int "Maximum number of IP sets"
17 default 256
18 range 2 65534
19 depends on IP_SET
20 help
21 You can define here default value of the maximum number
22 of IP sets for the kernel.
23
24 The value can be overridden by the 'max_sets' module
25 parameter of the 'ip_set' module.
26
27config IP_SET_BITMAP_IP
28 tristate "bitmap:ip set support"
29 depends on IP_SET
30 help
31 This option adds the bitmap:ip set type support, by which one
32 can store IPv4 addresses (or network addresse) from a range.
33
34 To compile it as a module, choose M here. If unsure, say N.
35
36config IP_SET_BITMAP_IPMAC
37 tristate "bitmap:ip,mac set support"
38 depends on IP_SET
39 help
40 This option adds the bitmap:ip,mac set type support, by which one
41 can store IPv4 address and (source) MAC address pairs from a range.
42
43 To compile it as a module, choose M here. If unsure, say N.
44
45config IP_SET_BITMAP_PORT
46 tristate "bitmap:port set support"
47 depends on IP_SET
48 help
49 This option adds the bitmap:port set type support, by which one
50 can store TCP/UDP port numbers from a range.
51
52 To compile it as a module, choose M here. If unsure, say N.
53
54config IP_SET_HASH_IP
55 tristate "hash:ip set support"
56 depends on IP_SET
57 help
58 This option adds the hash:ip set type support, by which one
59 can store arbitrary IPv4 or IPv6 addresses (or network addresses)
60 in a set.
61
62 To compile it as a module, choose M here. If unsure, say N.
63
64config IP_SET_HASH_IPMARK
65 tristate "hash:ip,mark set support"
66 depends on IP_SET
67 help
68 This option adds the hash:ip,mark set type support, by which one
69 can store IPv4/IPv6 address and mark pairs.
70
71 To compile it as a module, choose M here. If unsure, say N.
72
73config IP_SET_HASH_IPPORT
74 tristate "hash:ip,port set support"
75 depends on IP_SET
76 help
77 This option adds the hash:ip,port set type support, by which one
78 can store IPv4/IPv6 address and protocol/port pairs.
79
80 To compile it as a module, choose M here. If unsure, say N.
81
82config IP_SET_HASH_IPPORTIP
83 tristate "hash:ip,port,ip set support"
84 depends on IP_SET
85 help
86 This option adds the hash:ip,port,ip set type support, by which
87 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
88 address triples in a set.
89
90 To compile it as a module, choose M here. If unsure, say N.
91
92config IP_SET_HASH_IPPORTNET
93 tristate "hash:ip,port,net set support"
94 depends on IP_SET
95 help
96 This option adds the hash:ip,port,net set type support, by which
97 one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6
98 network address/prefix triples in a set.
99
100 To compile it as a module, choose M here. If unsure, say N.
101
102config IP_SET_HASH_IPMAC
103 tristate "hash:ip,mac set support"
104 depends on IP_SET
105 help
106 This option adds the hash:ip,mac set type support, by which
107 one can store IPv4/IPv6 address and MAC (ethernet address) pairs in a set.
108
109 To compile it as a module, choose M here. If unsure, say N.
110
111config IP_SET_HASH_MAC
112 tristate "hash:mac set support"
113 depends on IP_SET
114 help
115 This option adds the hash:mac set type support, by which
116 one can store MAC (ethernet address) elements in a set.
117
118 To compile it as a module, choose M here. If unsure, say N.
119
120config IP_SET_HASH_NETPORTNET
121 tristate "hash:net,port,net set support"
122 depends on IP_SET
123 help
124 This option adds the hash:net,port,net set type support, by which
125 one can store two IPv4/IPv6 subnets, and a protocol/port in a set.
126
127 To compile it as a module, choose M here. If unsure, say N.
128
129config IP_SET_HASH_NET
130 tristate "hash:net set support"
131 depends on IP_SET
132 help
133 This option adds the hash:net set type support, by which
134 one can store IPv4/IPv6 network address/prefix elements in a set.
135
136 To compile it as a module, choose M here. If unsure, say N.
137
138config IP_SET_HASH_NETNET
139 tristate "hash:net,net set support"
140 depends on IP_SET
141 help
142 This option adds the hash:net,net set type support, by which
143 one can store IPv4/IPv6 network address/prefix pairs in a set.
144
145 To compile it as a module, choose M here. If unsure, say N.
146
147config IP_SET_HASH_NETPORT
148 tristate "hash:net,port set support"
149 depends on IP_SET
150 help
151 This option adds the hash:net,port set type support, by which
152 one can store IPv4/IPv6 network address/prefix and
153 protocol/port pairs as elements in a set.
154
155 To compile it as a module, choose M here. If unsure, say N.
156
157config IP_SET_HASH_NETIFACE
158 tristate "hash:net,iface set support"
159 depends on IP_SET
160 help
161 This option adds the hash:net,iface set type support, by which
162 one can store IPv4/IPv6 network address/prefix and
163 interface name pairs as elements in a set.
164
165 To compile it as a module, choose M here. If unsure, say N.
166
167config IP_SET_LIST_SET
168 tristate "list:set set support"
169 depends on IP_SET
170 help
171 This option adds the list:set set type support. In this
172 kind of set one can store the name of other sets and it forms
173 an ordered union of the member sets.
174
175 To compile it as a module, choose M here. If unsure, say N.
176
177endif # IP_SET