blob: ef127dae41c3a7a23af87b8274ac503d9b1939c0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
config WIREGUARD
bool "IP: WireGuard secure network tunnel"
depends on NET && INET
select NET_UDP_TUNNEL
select NETFILTER_XT_MATCH_HASHLIMIT
select NETFILTER
select NETFILTER_XTABLES
select NETFILTER_ADVANCED
select NF_CONNTRACK
select CRYPTO_BLKCIPHER
select IP6_NF_IPTABLES if IPV6
default y
---help---
WireGuard is a secure, fast, and easy to use replacement for IPSec
that uses modern cryptography and clever networking tricks. It's
designed to be fairly general purpose and abstract enough to fit most
use cases, while at the same time remaining extremely simple to
configure. See www.wireguard.io for more info.
It's safe to say Y or M here, as the driver is very lightweight and
is only in use when an administrator chooses to add an interface.
config WIREGUARD_PARALLEL
bool "Enable parallel engine"
depends on SMP && WIREGUARD
select PADATA
default y
---help---
This will allow WireGuard to utilize all CPU cores when encrypting
and decrypting packets.
It's safe to say Y here, and you probably should, as the performance
improvements are substantial.
config WIREGUARD_DEBUG
bool "Debugging checks and verbose messages"
depends on WIREGUARD
---help---
This will write log messages for handshake and other events
that occur for a WireGuard interface. It will also perform some
extra validation checks and unit tests at various points. This is
only useful for debugging.
Say N here unless you know what you're doing.
|
