Linux内核配置(6)

<>Full NAT

允许进行伪装/端口转发以及其它的NAT功能,仅在你需要使用iptables中的nat表时才需要选择

<>MASQUERADE target support

<>Packet mangling

在iptables中启用mangle表以便对包进行各种修改,常用于改变包的路由

<>raw table support (required for NOTRACK/TRACE) (NEW)

在iptables中添加一个'raw'表,该表在netfilter框架中非常靠前,并在PREROUTING和OUTPUT链上有钩子,从而可以对收到的数据包在连接跟踪前进行处理

IPv6: Netfilter Configuration --->

针对IPv6的Netfilter配置

需要的话可以参考前面IPv4的Netfilter配置进行选择。

<> IPv6 connection tracking support

<> IP6 tables support (required for filtering)

<>"ipv6header" IPv6 Extension Headers Match

<>LOG target support

<>Packet filtering

<>REJECT target support

<>Packet mangling

<>raw table support (required for TRACE) (NEW)

<> The DCCP Protocol (EXPERIMENTAL) (NEW) --->

数据报拥塞控制协议

在UDP的基础上增加了流控和拥塞控制机制,使数据报协议能够更好地用于流媒体业务的传输。

可选N

--- The DCCP Protocol (EXPERIMENTAL)

DCCP CCIDs Configuration (EXPERIMENTAL) --->

[ ] CCID-2 debugging messages (NEW)

[] CCID-3 (TCP-Friendly) (EXPERIMENTAL) (NEW)

[ ] CCID-3 debugging messages (NEW)

DCCP Kernel Hacking --->

[ ] DCCP debug messages (NEW)

<> DCCP connection probing (NEW)

<> The SCTP Protocol (EXPERIMENTAL) (NEW) --->

流控制传输协议

一种新兴的传输层协议。TCP协议一次只能连接一个IP地址而在SCTP协议一次可以连接多个IP地址且可以自动平衡网络负载。一旦某一个IP地址失效会自动将网络负载转移到其他IP地址上。

--- The SCTP Protocol (EXPERIMENTAL)

<>SCTP: Association probing (NEW)

[ ] SCTP: Debug messages (NEW)

[ ] SCTP: Debug object counts (NEW)

SCTP: Cookie HMAC Algorithm (HMAC-MD5) --->

( ) None

( ) HMAC-SHA1

(X) HMAC-MD5

<> The RDS Protocol (EXPERIMENTAL) (NEW)

<> The TIPC Protocol (EXPERIMENTAL) (NEW) --->

透明内部进程间通信协议

以共享内存为基础实现任务和资源的调度,专门用于内部集群通信。

推荐N

--- The TIPC Protocol (EXPERIMENTAL)

[ ] Advanced TIPC configuration (NEW)

[ ] Enable debugging support (NEW)

<> Asynchronous Transfer Mode (ATM) (NEW)

异步传输模式(ATM)支持

它应用于局域网和广域网中。使用修改过的包尺寸，而且连接是定向的，只会占用非常小的带宽。

<> Layer Two Tunneling Protocol (L2TP) (NEW) --->

--- Layer Two Tunneling Protocol (L2TP)

<>L2TP debugfs support (NEW)

[ ] L2TPv3 support (EXPERIMENTAL) (NEW)

<> 802.1d Ethernet Bridging

802.1d以太网桥

如果选Y，机器将可以做为以太网桥接，对于用户来说，它可以让连接上的不同的以太网段表现为一个段。几个桥接段还可以通过IEEE 802.1生成树算法再连接为更大的网络。这是一个标准，linux可以用这个标准来与其他第三方的桥接产品进行协作。

为了使用以太网桥接，需要一些相关的配置工具。如果同时开启了IP表支持和桥接支持，将让你的桥变成桥接式IP防火墙。IP表将可以看到被桥接的IP包，所以在设置防火墙规则时，需要把这考虑进去。桥接时允许ARP表支持将让ARP表在连接链中看到被桥接的ARP包。

编译成模块为：bridge

<> Distributed Switch Architecture support (NEW)

<> 802.1Q VLAN Support

802.1Q虚拟局域网

可以再以太网接口中建立802.1Q VLAN接口。802.1Q VLAN支持大多数以太网接口，包括防火墙、桥接，也包括IP传输。需要‘vconfig’的一个工具来使用VLAN。

编译成模块为：8021q

<> DECnet Support

DEC网络支持

DECnet网络协议在Digital（现在是Compaq）的很多产品上使用。它提供可靠的流和顺序包连接，可与TCP/IP进行通信。在使用DECnet时，需在“/proc/ file system support”和“Sysctl support”中选择Y，因为它运行需要sysctl的支持才能更改配置。

编译成模块为：decnet

<> ANSI/IEEE 802.2 LLC type 2 Support

一个逻辑的连接层，提供定向的连接支持。如果你需要PF_LLC套接口的支持，选Y

<> The IPX protocol

IPX协议

这是对Novell的网络协议，IPX的支持选项。IPX在局域网的Windows机器上广泛使用。如果要访问Novell NetWare文件或者打印服务，就需要这个选项，同时还需要在下面的“NCP file system support”中选Y。

IPX驱动会使内核增大16KB。编译成模块为：ipx。

<> Appletalk protocol support

Appletalk协议支持。

<> CCITT X.25 Packet Layer (EXPERIMENTAL) (NEW)

大约没人需要这东西

<> LAPB Data Link Driver (EXPERIMENTAL) (NEW)

大约没人需要这东西

<> Acorn Econet/AUN protocols (EXPERIMENTAL) (NEW)

一种被Acorn计算机使用的又老又慢的协议。

<> WAN router (NEW)

广域网路由

<> Phonet protocols family

<> IEEE Std 802.15.4 Low-Rate Wireless Personal Area Networks su

[ ] QoS and/or fair queueing --->

服务质量和/或公平队列

当有多个数据包要通过网络设备发送时，内核采用调度算法决定发送顺序。

若选N，将会得到标准的数据包调度程序FIFO（先进先出）。如果选Y，将可以从几个算法中选择并将其应用于不同的网络设备。这对于需要保持小数据流量的实时网络设备与需要限制通信流量的设备很有用。

用于路由器或NAT，可修改网内各计算机的各数据流优先级。使用相应第三方软件修改各数据流CoS后才有效。会占用一定的CPU和网络资源。

--- QoS and/or fair queueing

*** Queueing/Scheduling ***

<> Class Based Queueing (CBQ) (NEW)

<> Hierarchical Token Bucket (HTB) (NEW)

<>Hierarchical Fair Service Curve (HFSC) (NEW)

<>Multi Band Priority Queueing (PRIO) (NEW)

<>Hardware Multiqueue-aware Multi Band Queuing (MULTIQ) (NEW)

<>Random Early Detection (RED) (NEW)

<>Stochastic Fair Blue (SFB) (NEW)

<>Stochastic Fairness Queueing (SFQ) (NEW)

<>True Link Equalizer (TEQL) (NEW)

<>Token Bucket Filter (TBF) (NEW)

<>Generic Random Early Detection (GRED) (NEW)

<>Differentiated Services marker (DSMARK) (NEW)

<>Network emulator (NETEM) (NEW)

<>Deficit Round Robin scheduler (DRR) (NEW)

<>Multi-queue priority scheduler (MQPRIO) (NEW)

<>CHOose and Keep responsive flow scheduler (CHOKE) (NEW)

<>Quick Fair Queueing scheduler (QFQ) (NEW)

<>Ingress Qdisc (NEW)

*** Classification ***

<>Elementary classification (BASIC) (NEW)

<>Traffic-Control Index (TCINDEX) (NEW)

<>Routing decision (ROUTE) (NEW)

<>Netfilter mark (FW) (NEW)

<>Universal 32bit comparisons w/ hashing (U32) (NEW)

<>IPv4 Resource Reservation Protocol (RSVP) (NEW)

<>IPv6 Resource Reservation Protocol (RSVP6) (NEW)

<>Flow classifier (NEW)

<>Control Group Classifier (NEW)

[] Extended Matches

(32) Stack size (NEW)

<>Simple packet data comparison (NEW)

<>Multi byte comparison (NEW)

<>U32 key (NEW)

<> Metadata (NEW)

<>Textsearch (NEW)

[] Actions

<>Traffic Policing (NEW)

<>Generic actions (NEW)

<>Redirecting and Mirroring (NEW)

<>IPtables targets (NEW)

<>Stateless NAT (NEW)

<>Packet Editing (NEW)

<>Simple Example (Debug) (NEW)

<>SKB Editing (NEW)

<>Checksum Updating (NEW)

[ ] Data Center Bridging support

-*- DNS Resolver support

<> B.A.T.M.A.N. Advanced Meshing Protocol (NEW)

<> Open vSwitch (NEW)

<> Network priority cgroup (NEW)

Network testing --->

网络测试

<> Packet Generator (USE WITH CAUTION) (NEW)

这个模块通过设置的频率和特定的接口，向预制包中注入数据。它用于网络接口的负荷测试和程序分析。

若不清楚，可选N。编译成模块为：pktgen

<> TCP connection probing (NEW)

[ ] Network packet drop alerting service (NEW)

[] Amateur Radio support --->

业余无线电支持

--- Amateur Radio support

*** Packet Radio protocols ***

<>Amateur Radio AX.25 Level 2 protocol

[] AX.25 DAMA Slave support (NEW)

<>Amateur Radio NET/ROM protocol

<>Amateur Radio X.25 PLP (Rose)

AX.25 network device drivers --->

<> Serial port KISS driver

<> Serial port 6PACK driver

<> BPQ Ethernet driver

<> Z8530 SCC driver

[] additional delay for PA0HZP OptoSCC compatible boards

[] support for TRX that feedback the tx signal to rx

<> BAYCOM ser12 fullduplex driver for AX.25

<> BAYCOM ser12 halfduplex driver for AX.25

<> YAM driver for AX.25

<>CAN bus subsystem support (NEW) --->

CAN总线子系统支持

控制区域网络（CAN）是一个慢速的串行通信协议。是Bosch开发的，起初用于汽车，现在用于潜艇、工业和医疗软件。

--- CAN bus subsystem support

<>Raw CAN Protocol (raw access with CAN-ID filtering) (NEW)

<>Broadcast Manager CAN Protocol (with content filtering) (NEW)

<>CAN Gateway/Router (with netlink configuration) (NEW)

CAN Device Drivers --->

<> Virtual Local CAN Interface (vcan) (NEW)

<> Serial / USB serial CAN Adaptors (slcan) (NEW)

<> Platform CAN drivers with Netlink support (NEW)

[ ] CAN bit-timing calculation

<> PCH CAN (NEW)

Philips/NXP SJA1000 devices --->

--- Philips/NXP SJA1000 devices

<>ISA Bus based legacy SJA1000 driver (NEW)

<>Generic Platform Bus based SJA1000 driver (NEW)

<>EMS CPC-CARD Card (NEW)

<>EMS CPC-PCI, CPC-PCIe and CPC-104P Card (NEW)

<>PEAK PCAN PCI/PCIe Cards (NEW)

<>Kvaser PCIcanx and Kvaser PCIcan PCI Cards (NEW)

<>PLX90xx PCI-bridge based Cards (NEW)

<> Bosch C_CAN devices (NEW) --->

--- Bosch C_CAN devices

<>Generic Platform Bus based C_CAN driver (NEW)

<> Bosch CC770 and Intel AN82527 devices (NEW) --->

--- <>ISA Bus based legacy CC770 driver (NEW) Bosch CC770 and Intel AN82527 devices

<>Generic Platform Bus based CC770 driver (NEW)

CAN USB interfaces --->

<> EMS CPC-USB/ARM7 CAN/USB interface (NEW)

<> ESD USB/2 CAN/USB interface (NEW)

<> Softing Gmbh CAN generic support (NEW)

[ ] CAN devices debugging messages (NEW)

<>IrDA (infrared) subsystem support (NEW) --->

--- IrDA (infrared) subsystem support