Changes in Kconfig

0a658d08 - net/tcp: Expand goo.gl link

Mon, 29 Jul 2024 20:53:37 +0000

net/tcp: Expand goo.gl linkThe goo.gl URL shortener is deprecated and is due to stopexpanding existing links in 2025.Expand the link in Kconfig.Signed-off-by: Dr. David Alan Gilbert Reviewed-by: Simon Horman Link: https://patch.msgid.link/20240729205337.48058-1-linux@treblig.orgSigned-off-by: Jakub Kicinski List of files: /linux-6.15/net/ipv4/Kconfig

c845f5f3 - net/tcp: Add TCP-AO config and structures

Mon, 23 Oct 2023 19:21:54 +0000

net/tcp: Add TCP-AO config and structuresIntroduce new kernel config option and common structures as well ashelpers to be used by TCP-AO code.Co-developed-by: Francesco Ruggeri Signed-off-by: Francesco Ruggeri Co-developed-by: Salam Noureddine Signed-off-by: Salam Noureddine Signed-off-by: Dmitry Safonov Acked-by: David Ahern Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv4/Kconfig

8c73b263 - net/tcp: Prepare tcp_md5sig_pool for TCP-AO

Mon, 23 Oct 2023 19:21:53 +0000

net/tcp: Prepare tcp_md5sig_pool for TCP-AOTCP-AO, similarly to TCP-MD5, needs to allocate tfms on a slow-path,which is setsockopt() and use crypto ahash requests on fast paths,which are RX/TX softirqs. Also, it needs a temporary/scratch bufferfor preparing the hash.Rework tcp_md5sig_pool in order to support other hashing algorithmsthan MD5. It will make it possible to share pre-allocated crypto_ahashdescriptors and scratch area between all TCP hash users.Internally tcp_sigpool calls crypto_clone_ahash() API over pre-allocatedcrypto ahash tfm. Kudos to Herbert, who provided this new crypto API.I was a little concerned over GFP_ATOMIC allocations of ahash andcrypto_request in RX/TX (see tcp_sigpool_start()), so I benchmarked both"backends" with different algorithms, using patched version of iperf3[2].On my laptop with i7-7600U @ 2.80GHz: clone-tfm per-CPU-requestsTCP-MD5 2.25 Gbits/sec 2.30 Gbits/secTCP-AO(hmac(sha1)) 2.53 Gbits/sec 2.54 Gbits/secTCP-AO(hmac(sha512)) 1.67 Gbits/sec 1.64 Gbits/secTCP-AO(hmac(sha384)) 1.77 Gbits/sec 1.80 Gbits/secTCP-AO(hmac(sha224)) 1.29 Gbits/sec 1.30 Gbits/secTCP-AO(hmac(sha3-512)) 481 Mbits/sec 480 Mbits/secTCP-AO(hmac(md5)) 2.07 Gbits/sec 2.12 Gbits/secTCP-AO(hmac(rmd160)) 1.01 Gbits/sec 995 Mbits/secTCP-AO(cmac(aes128)) [not supporetd yet] 2.11 Gbits/secSo, it seems that my concerns don't have strong grounds and per-CPUcrypto_request allocation can be dropped/removed from tcp_sigpool onceciphers get crypto_clone_ahash() support.[1]: https://lore.kernel.org/all/ZDefxOq6Ax0JeTRH@gondor.apana.org.au/T/#u[2]: https://github.com/0x7f454c46/iperf/tree/tcp-md5-aoSigned-off-by: Dmitry Safonov Reviewed-by: Steen Hegelund Acked-by: David Ahern Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv4/Kconfig

aeac4ec8 - tcp: configurable source port perturb table size

Mon, 14 Nov 2022 22:56:16 +0000

tcp: configurable source port perturb table sizeOn embedded systems with little memory and no relevantsecurity concerns, it is beneficial to reduce the sizeof the table.Reducing the size from 2^16 to 2^8 saves 255 KiBof kernel RAM.Makes the table size configurable as an expert option.The size was previously increased from 2^8 to 2^16in commit 4c2c8f03a5ab ("tcp: increase source port perturb table to2^16").Signed-off-by: Gleb Mazovetskiy Reviewed-by: Kuniyuki Iwashima Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv4/Kconfig

753b9537 - fou: Remove XRFM from NET_FOU Kconfig

Mon, 11 Apr 2022 21:37:17 +0000

fou: Remove XRFM from NET_FOU KconfigXRFM is no longer needed for configuring FOU tunnels(CONFIG_NET_FOU_IP_TUNNELS), remove from Kconfig.Also remove the xrfm.h dependency in fou.c. It wasadded in '23461551c006 ("fou: Support for foo-over-udp RX path")'for depencies of udp_del_offload and udp_offloads, which were removed in'd92283e338f6 ("fou: change to use UDP socket GRO")'.Built and installed kernel and setup GUE/FOU tunnels.Signed-off-by: Coco Li Link: https://lore.kernel.org/r/20220411213717.3688789-1-lixiaoyan@google.comSigned-off-by: Jakub Kicinski List of files: /linux-6.15/net/ipv4/Kconfig

ad664118 - net: ipv4: remove duplicate "the the" phrase in Kconfig text

Mon, 17 Aug 2020 22:44:25 +0000

net: ipv4: remove duplicate "the the" phrase in Kconfig textThe Kconfig help text contains the phrase "the the" in the helptext. Fix this and reformat the block of help text.Signed-off-by: Colin Ian King Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv4/Kconfig

7a6498eb - Replace HTTP links with HTTPS ones: IPv*

Mon, 06 Jul 2020 17:38:50 +0000

Replace HTTP links with HTTPS ones: IPv*Rationale:Reduces attack surface on kernel devs opening the links for MITMas HTTPS traffic is much harder to manipulate.Deterministic algorithm:For each file: If not .svg: For each line: If doesn't contain `\bxmlns\b`: For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`: If both the HTTP and HTTPS versions return 200 OK and serve the same content: Replace HTTP with HTTPS.Signed-off-by: Alexander A. Klimov Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv4/Kconfig

be013698 - esp, ah: modernize the crypto algorithm selections

Wed, 10 Jun 2020 16:14:37 +0000

esp, ah: modernize the crypto algorithm selectionsThe crypto algorithms selected by the ESP and AH kconfig options areout-of-date with the guidance of RFC 8221, which lists the legacyalgorithms MD5 and DES as "MUST NOT" be implemented, and some moremodern algorithms like AES-GCM and HMAC-SHA256 as "MUST" be implemented.But the options select the legacy algorithms, not the modern ones.Therefore, modify these options to select the MUST algorithms --and *only* the MUST algorithms.Also improve the help text.Note that other algorithms may still be explicitly enabled in thekconfig, and the choice of which to actually use is still controlled byuserspace. This change only modifies the list of algorithms for whichkernel support is guaranteed to be present.Suggested-by: Herbert Xu Suggested-by: Steffen Klassert Acked-by: Herbert Xu Cc: Corentin Labbe Cc: Greg Kroah-Hartman Signed-off-by: Eric Biggers Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/ipv4/Kconfig

7d4e3919 - esp, ah: consolidate the crypto algorithm selections

Wed, 10 Jun 2020 16:14:35 +0000

esp, ah: consolidate the crypto algorithm selectionsInstead of duplicating the algorithm selections between INET_AH andINET6_AH and between INET_ESP and INET6_ESP, create new tristatesXFRM_AH and XFRM_ESP that do the algorithm selections, and make these beselected by the corresponding INET* options.Suggested-by: Herbert Xu Acked-by: Herbert Xu Cc: Corentin Labbe Cc: Greg Kroah-Hartman Cc: Steffen Klassert Signed-off-by: Eric Biggers Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/ipv4/Kconfig

a7f7f624 - treewide: replace '---help---' in Kconfig files with 'help'

Sat, 13 Jun 2020 16:50:22 +0000

treewide: replace '---help---' in Kconfig files with 'help'Since commit 84af7a6194e4 ("checkpatch: kconfig: prefer 'help' over'---help---'"), the number of '---help---' has been graduallydecreasing, but there are still more than 2400 instances.This commit finishes the conversion. While I touched the lines,I also fixed the indentation.There are a variety of indentation styles found. a) 4 spaces + '---help---' b) 7 spaces + '---help---' c) 8 spaces + '---help---' d) 1 space + 1 tab + '---help---' e) 1 tab + '---help---' (correct indentation) f) 1 tab + 1 space + '---help---' g) 1 tab + 2 spaces + '---help---'In order to convert all of them to 1 tab + 'help', I ran thefollowing commend: $ find . -name 'Kconfig*' | xargs sed -i 's/^[[:space:]]*---help---/\thelp/'Signed-off-by: Masahiro Yamada List of files: /linux-6.15/net/ipv4/Kconfig

1cec2cac - docs: networking: convert ip-sysctl.txt to ReST

Mon, 27 Apr 2020 22:01:49 +0000

docs: networking: convert ip-sysctl.txt to ReST- add SPDX header;- adjust titles and chapters, adding proper markups;- mark code blocks and literals as such;- mark lists as such;- mark tables as such;- use footnote markup;- adjust identation, whitespaces and blank lines;- add to networking/index.rst.Signed-off-by: Mauro Carvalho Chehab Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv4/Kconfig

26333c37 - xfrm: add IPv6 support for espintcp

Mon, 27 Apr 2020 15:59:35 +0000

xfrm: add IPv6 support for espintcpThis extends espintcp to support IPv6, building on the existing codeand the new UDPv6 encapsulation support. Most of the code is eitherreused directly (stream parser, ULP) or very similar to the IPv4variant (net/ipv6/esp6.c changes).The separation of config options for IPv4 and IPv6 espintcp requires abit of Kconfig gymnastics to enable the core code.Signed-off-by: Sabrina Dubroca Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/ipv4/Kconfig

3eb30c51 - Documentation: nfsroot.rst: Fix references to nfsroot.rst

Wed, 12 Feb 2020 18:13:32 +0000

Documentation: nfsroot.rst: Fix references to nfsroot.rstWhen converting and moving nfsroot.txt to nfsroot.rst the references tothe old text file was not updated to match the change, fix this.Fixes: f9a9349846f92b2d ("Documentation: nfsroot.txt: convert to ReST")Signed-off-by: Niklas Söderlund Reviewed-by: Geert Uytterhoeven Link: https://lore.kernel.org/r/20200212181332.520545-1-niklas.soderlund+renesas@ragnatech.seSigned-off-by: Jonathan Corbet List of files: /linux-6.15/net/ipv4/Kconfig

f1ed1026 - vti[6]: fix packet tx through bpf_redirect() in XinY cases

Tue, 04 Feb 2020 16:00:27 +0000

vti[6]: fix packet tx through bpf_redirect() in XinY casesI forgot the 4in6/6in4 cases in my previous patch. Let's fix them.Fixes: 95224166a903 ("vti[6]: fix packet tx through bpf_redirect()")Signed-off-by: Nicolas Dichtel Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/ipv4/Kconfig

e27cca96 - xfrm: add espintcp (RFC 8229)

Mon, 25 Nov 2019 13:49:02 +0000

xfrm: add espintcp (RFC 8229)TCP encapsulation of IKE and IPsec messages (RFC 8229) is implementedas a TCP ULP, overriding in particular the sendmsg and recvmsgoperations. A Stream Parser is used to extract messages out of the TCPstream using the first 2 bytes as length marker. Received IKE messagesare put on "ike_queue", waiting to be dequeued by the custom recvmsgimplementation. Received ESP messages are sent to XFRM, like with UDPencapsulation.Some of this code is taken from the original submission by HerbertXu. Currently, only IPv4 is supported, like for UDP encapsulation.Co-developed-by: Herbert Xu Signed-off-by: Herbert Xu Signed-off-by: Sabrina Dubroca Acked-by: David S. Miller Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/ipv4/Kconfig

43da1411 - net: Fix Kconfig indentation, continued

Thu, 21 Nov 2019 13:28:35 +0000

net: Fix Kconfig indentation, continuedAdjust indentation from spaces to tab (+optional two spaces) as incoding style. This fixes various indentation mixups (seven spaces,tab+one space, etc).Signed-off-by: Krzysztof Kozlowski Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv4/Kconfig

bf69abad - net: Fix Kconfig indentation

Mon, 23 Sep 2019 15:52:42 +0000

net: Fix Kconfig indentationAdjust indentation from spaces to tab (+optional two spaces) as incoding style with command like: $ sed -e 's/^ /\t/' -i */KconfigSigned-off-by: Krzysztof Kozlowski Acked-by: Sven Eckelmann Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv4/Kconfig

ec8f24b7 - treewide: Add SPDX license identifier - Makefile/Kconfig

Sun, 19 May 2019 12:07:45 +0000

treewide: Add SPDX license identifier - Makefile/KconfigAdd SPDX license identifiers to all Make/Kconfig files which: - Have no license information of any formThese files fall under the project license, GPL v2 only. The resulting SPDXlicense identifier is: GPL-2.0-onlySigned-off-by: Thomas Gleixner Signed-off-by: Greg Kroah-Hartman List of files: /linux-6.15/net/ipv4/Kconfig

4c145dce - xfrm: make xfrm modes builtin

Fri, 29 Mar 2019 20:16:31 +0000

xfrm: make xfrm modes builtinafter previous changes, xfrm_mode contains no function pointers anymoreand all modules defining such struct contain no code except an init/exitfunctions to register the xfrm_mode struct with the xfrm core.Just place the xfrm modes core and remove the modules,the run-time xfrm_mode register/unregister functionality is removed.Before: text data bss dec filename 7523 200 2364 10087 net/xfrm/xfrm_input.o 40003 628 440 41071 net/xfrm/xfrm_state.o15730338 6937080 4046908 26714326 vmlinux 7389 200 2364 9953 net/xfrm/xfrm_input.o 40574 656 440 41670 net/xfrm/xfrm_state.o15730084 6937068 4046908 26714060 vmlinuxThe xfrm*_mode_{transport,tunnel,beet} modules are gone.v2: replace CONFIG_INET6_XFRM_MODE_* IS_ENABLED guards with CONFIG_IPV6 ones rather than removing them.Signed-off-by: Florian Westphal Reviewed-by: Sabrina Dubroca Signed-off-by: Steffen Klassert List of files: /linux-6.15/net/ipv4/Kconfig

e446a276 - net: remove blank lines at end of file

Tue, 24 Jul 2018 19:29:18 +0000

net: remove blank lines at end of fileSeveral files have extra line at end of file.Signed-off-by: Stephen Hemminger Signed-off-by: David S. Miller List of files: /linux-6.15/net/ipv4/Kconfig