net/bridge/netfilter/Kconfig

Source file repositories/reference/linux-study-clean/net/bridge/netfilter/Kconfig

File Facts

System
Linux kernel
Corpus path
net/bridge/netfilter/Kconfig
Extension
[no extension]
Size
7871 bytes
Lines
257
Domain
Networking Core
Bucket
Sockets, Protocols, Packet Path, And Network Policy
Inferred role
Networking Core: build/configuration rule
Status
atlas-only

Why This File Exists

Networking stack implementation surface: socket APIs, protocol dispatch, packet flow, routing, filtering, and network namespaces.

Dependency Surface

Detected Declarations

Annotated Snippet

# SPDX-License-Identifier: GPL-2.0-only
#
# Bridge netfilter configuration
#
#
menuconfig NF_TABLES_BRIDGE
	depends on BRIDGE && NETFILTER && NF_TABLES
	select NETFILTER_FAMILY_BRIDGE
	tristate "Ethernet Bridge nf_tables support"

if NF_TABLES_BRIDGE

config NFT_BRIDGE_META
	tristate "Netfilter nf_table bridge meta support"
	help
	  Add support for bridge dedicated meta key.

config NFT_BRIDGE_REJECT
	tristate "Netfilter nf_tables bridge reject support"
	depends on NFT_REJECT
	depends on NF_REJECT_IPV4
	depends on NF_REJECT_IPV6
	help
	  Add support to reject packets.

endif # NF_TABLES_BRIDGE

config NF_CONNTRACK_BRIDGE
	tristate "IPv4/IPV6 bridge connection tracking support"
	depends on NF_CONNTRACK
	default n
	help
	  Connection tracking keeps a record of what packets have passed
	  through your machine, in order to figure out how they are related
	  into connections. This is used to enhance packet filtering via
	  stateful policies. Enable this if you want native tracking from
	  the bridge. This provides a replacement for the `br_netfilter'
	  infrastructure.

	  To compile it as a module, choose M here.  If unsure, say N.

# old sockopt interface and eval loop
config BRIDGE_NF_EBTABLES_LEGACY
	tristate "Legacy EBTABLES support"
	depends on BRIDGE && NETFILTER_XTABLES_LEGACY
	depends on NETFILTER_XTABLES
	default	n
	help
	 Legacy ebtables packet/frame classifier.
	 This is not needed if you are using ebtables over nftables
	 (iptables-nft).

menuconfig BRIDGE_NF_EBTABLES
	tristate "Ethernet Bridge tables (ebtables) support"
	depends on BRIDGE && NETFILTER && NETFILTER_XTABLES
	select NETFILTER_FAMILY_BRIDGE
	help
	  ebtables is a general, extensible frame/packet identification
	  framework. Say 'Y' or 'M' here if you want to do Ethernet
	  filtering/NAT/brouting on the Ethernet bridge.

if BRIDGE_NF_EBTABLES

#
# tables
#
config BRIDGE_EBT_BROUTE
	tristate "ebt: broute table support"
	depends on BRIDGE_NF_EBTABLES_LEGACY
	help

Annotation

Implementation Notes