第零章 核心網路相關配置選項--基於Linux 3.10
Kconfig選項
packet protocol 被直接和網路裝置通訊的應用程式使用,其沒有使用核心的其它協議,像tcpdump支援需要使能該選項,af_packet。
<*> Packet socket
支援PF_PACKET套接字,ss之類工具監控介面(eth0...)會使用這類套接字
< > Packet:sockets monitoring interface
//UNIX域套接字,即使沒有聯網Xwindow和syslog也會使用UNIX域套接字。強烈建議該選項為Y
<*> Unix domain sockets
支援ss工具使用的Unix域套接字來監控interface
<*> UNIX: socketmonitoring interface
支援XFRM(Transformation),對接收到的資料包經過路由時會被修改;
< > Transformationuser configuration interface
[ ] Transformation sub policysupport
[ ] Transformation migratedatabase
[ ] Transformation statistics
PF_KEYv2套接字協議族,如果使用移植於KAME的IPsec工具,該選項需要。
< > PF_KEY sockets
會使核心增加400KB
[*] TCP/IP networking
多播,核心增加2KB,對於MBONE(Multicast backbone),一個應用場景是影音節目的全球廣播。
[*] IP: multicasting
這個選項用於支援網路資料包的forward和redistribute,並不包括路由的基本配置。
[*] IP: advanced router
//路由的TRIE表統計,測試TRIE演算法的效能
[ ] FIB TRIEstatistics
通常路由根據接收到的資料包最終目的地址決策資料包的命運,如果使用策略路由,那麼源地址、TOS也會被考慮進去。
[ ] IP: policyrouting
通常,對一個數據包路由表會明確給出一個路徑;如果配置該選項,對一個給定的資料包將可能存在多種路徑,路由會將這些路徑當成開銷是一樣的,對路徑的選擇將是不確定的。
[ ] IP: equal cost multipath
klogd將匯出路由資訊。
[ ] IP: verboseroute monitoring
核心啟動時將允許裝置的IP地址和路由表的自動配置。配置的依據是核心命令列或者BOOTP、RARP協議。無盤系統啟動需要配置此選項。
[ ] IP: kernel levelautoconfiguration
隧道,將一個協議的資料封裝在另一個協議中,通過一個支援封裝協議的通道傳送。這裡是IP封裝IP的隧道支援,可用於支援主機偽裝和移動IP
< > IP: tunneling
解GRE(Generic Routing Encapsulation)包,使用ip_gre和pptp(point to point Tunning Protocol)點對點隧道協議,則需要配置該選項。
< > IP: GREdemultiplexer
多目的地址路由支援。MBNOE
[ ] IP: multicast routing
核心維持一個IP對映到MAC的cache,ARP協議負責該對映,如果想支援使用者空間daemon完成地址解析,這裡配置上就行
[ ] IP: ARP daemon support
TCP/IP網路易受SYN 攻擊,DOS攻擊阻止了合法使用者建立連線;SYN cookie方法使用加密的方法能夠在主機收到攻擊時仍然可以通訊。
[ ] IP: TCP syncookiesupport
支援IPsec AH(Authentication Header),見http://en.wikipedia.org/wiki/IPsec
< > IP: AHtransformation
支援IPsec ESP (Encapsulating Security Payload)
< > IP: ESPtransformation
IP PayloadCompression Protocol (IPComp) (RFC3173),IPsec需要
< > IP: IPComptransformation
Support for IPsectransport mod
< > IP: IPsectransport mode
Support for IPsectunnel mode
< > IP: IPsectunnel mode
Support for IPsecBEET mode
< > IP: IPsecBEET mode
Support for LargeReceive Offload (ipv4/tcp)
<*> Large ReceiveOffload (ipv4/tcp)
Support for INET(TCP, DCCP, etc) socket monitoring interface used by native Linux toolssuch as ss. ss is included in iproute2
< > INET: socketmonitoring interface
various TCPcongestion control CUBIC TCP、 H-TCP、TCP Westwood+、Binary Increase Congestion (BIC) control,預設使用cubic演算法
[ ] TCP: advancedcongestion control --->
RFC2385 specifiesa method of giving MD5 protection to TCP sessions.
[ ] TCP: MD5 SignatureOption support (RFC2385)
<*> The IPv6protocol --->
網路資料包security marking
[ ] Security Marking
PHY裝置對資料包進行時間戳標記
[ ] Timestamping in PHY devices
netfilter,1、透明代理 2、包過濾防火牆。
[*] Network packet filteringframework (Netfilter) --->
DatagramCongestion Control Protocol
< > The DCCP Protocol --->
Stream ControlTransmission Protocol
< > The SCTP Protocol --->
RDS (ReliableDatagram Sockets) protocol,provides reliable, sequenced deliveryof datagrams over Infiniband, iWARP, or TCP.
< > The RDS Protocol
Transparent InterProcess Communication (TIPC) protocol,
< > The TIPC Protocol --->
ATM is ahigh-speed networking technology for Local Area Networks and Wide AreaNetworks.
< > AsynchronousTransfer Mode (ATM)
對於PVC(permanent virtual circuit)和SVC(switched virtual circuits)下的基於ATM(Asynchronous Transfer Mode)的經典IP支援
<M> Classical IP over ATM
如果鄰居沒有發現時,則不傳送“ICMP host unreachable”訊息
[ ] Do NOT send ICMP if no neighbor
模擬LAN
<M> LAN Emulation (LANE) support
ATM之上的Multi-Protocol使得ATM邊緣裝置(邊緣裝置是指提供服務入口點的裝置,如路由器等)和ATM主機在子網邊界建立直接的ATM 虛擬電路。
<M> Multi-Protocol Over ATM (MPOA) support
<M> RFC1483/2684 Bridged protocols
[ ] Per-VC IP filter kludge
< > Layer Two Tunneling Protocol (L2TP) --->
乙太網橋支援。
< > 802.1d EthernetBridging
[*] IGMP/MLD snooping
[ ] VLAN filtering (NEW)
802.1Q VLAN支援
< > 802.1Q/802.1adVLAN Support
[*] GVRP (GARP VLAN Registration Protocol)support
[ ] MVRP (Multiple VLAN Registration Protocol)support (NEW)
< > DECnet Support
< > ANSI/IEEE 802.2 LLC type 2 Support
< > The IPX protocol
< > Appletalk protocolsupport
< > CCITT X.25 PacketLayer
< > LAPB Data Link Driver
< > Phonet protocols family
< > IEEE Std 802.15.4Low-Rate Wireless Personal Area Networks support
[ ] QoS and/or fair queueing --->
[ ] Data Center Bridgingsupport
< > B.A.T.M.A.N. Advanced MeshingProtocol
BLA (Bridge LoopAvoidance)
[*] Bridge Loop Avoidance
< > Open vSwitch < >Virtual Socket protocol
[ ] NETLINK: mmaped IO
< > NETLINK: socket monitoring interface
< > Network prioritycgroup
Berkeley PacketFilter filtering,/proc/sys/net/core/bpf_jit_enable
[ ] enable BPF Just In Time compiler
ip-sysctl意義
見Documentation/networking/ip-sysctl.txt