4584
- 收藏
- 点赞
- 分享
- 举报
Linux2.6.x 内核配置说明3
Networking support ---> 这个下面是选网卡驱动,一定要选
Networking support网卡驱动,肯定要选
Networking options --->
<*> Packet socket让
kernel支援
packet的传输,当然要选
Packet socket: mmapped IO让传输加速用的,要开启
MapleBBS內的MMIO也需要这东西,当然要选
<*> Netlink device emulation最好编译成模块(也可以不用选择)
<*> Unix domain sockets
syslogd、x-windows等都是用socket來传输,即便电脑没网路,也需要他,所以是一定要选的 ...
PF_KEY sockets和IP Sec有关,可以编译成模块
TCP/IP networking 最基本的组网工具,一定要选
IP: multicasting可以同时定制数个网路位址的东东,建议开启
IP: advanced router 不用选择
IP: policy routing
IP: use netfilter MARK value as routing key
IP: fast network address translation
IP: equal cost multipath
IP: use TOS value as routing key
IP: verbose route monitoring以上7项是关于路由器设置的,不用选了
IP: kernel level autoconfiguration让
kernel可以自动设定 IP地址,选上吧
IP: DHCP support
IP: BOOTP support
IP: RARP support如有需要用DHCP取IP地址或是有用NFS一类的FS才需要用这三个选上吧
IP: tunneling一般人用不上,是让
Linux可以在不同网域间移动且不需改变
ip的东东不用选择
IP: GRE tunnels over IP 可以不用选择
IP: broadcast GRE over IP不用选择
IP: multicast routing以上三个主机不拿来当路由器的話,沒什么用
IP: PIM-SM version 1 support一般都要选择,
IP: PIM-SM version 2 support一般都要选择
[ ] IP: ARP daemon support (EXPERIMENTAL)可以不用选择
IP: TCP syncookie support (disabled per default)一种避免被用大量
packet攻击用的东东
IP: AH transformation(可以不用选择)
IP: ESP transformation (可以不用选择)
IP: IPComp transformation以上三个是 IP Sec用的,可以編成module(也可以不用选择)
IP: Virtual Server Configuration ---> Virtual Server Configuration中的选项设定都用M,按
默认
负载均衡集群是在应用服务器高负载的情况下,由多台节点提供可伸缩的,高负载的服务器组以保证对外提供良好的服务
响应;而LVS就是实现这一功能的技术,它通过使内核支持ipvs来实现LVS/Direct Routing (DR)、LVS/IP Tunnel、
LVS/NAT的功能
IP virtual server support (EXPERIMENTAL)
IP virtual server debugging
(12) IPVS connection table size (the Nth power of 2)
---IPVS transport protocol load balancing support
TCP load balancing support
UDP load balancing support
ESP load balancing support
AH load balancing support
---IPVS scheduler
round-robin scheduling
weighted round-robin scheduling
least-connection scheduling
weighted least-connection scheduling
locality-based least-connection scheduling
locality-based least-connection with replication scheduling
destination hashing scheduling
source hashing scheduling
shortest expected delay scheduling
never queue scheduling
---IPVS application helper
FTP protocol helper
The IPv6 protocol (EXPERIMENTAL)(可以不用选择)
IPv6: Privacy Extensions (RFC 3041) support
IPv6: AH transformation
IPv6: ESP transformation
IPv6: IPComp transformation
IPv6: IPv6-in-IPv6 tunnel
Network packet filtering (replaces ipchains) --->网路封包过滤,可用来取代 ipchains可以选择
---Network packet filtering (replaces ipchains)
Network packet filtering debugging这个不用选择了
Bridged IP/ARP packets filtering 可以选择
IP: Netfilter Configuration ---> 这就是防火墙机制里头的 iptables啦!按默认都编成模
块 Connection tracking (required for masq/NAT)
FTP protocol support
IRC protocol support
TFTP protocol support
Amanda backup protocol support
Userspace queueing via NETLINK
IP tables support (required for filtering/masq/NAT)
limit match support
IP range match support
MAC address match support
Packet type match support
netfilter MARK match support
Multiple port match support
TOS match support
recent match support
ECN match support
DSCP match support
AH/ESP match support
LENGTH match support
TTL match support
tcpmss match support
Helper match support
Connection state match support
Connection tracking match support
Owner match support
Physdev match support
Packet filtering
REJECT target support
Full NAT
MASQUERADE target support
REDIRECT target support
NETMAP target support
SAME target support
NAT of local connections (READ HELP)
Basic SNMP-ALG support (EXPERIMENTAL)
Packet mangling
TOS target support
ECN target support
DSCP target support
MARK target support
CLASSIFY target support
LOG target support
ULOG target support
TCPMSS target support
ARP tables support
ARP packet filtering
ARP payload mangling
ipchains (2.2-style) support
ipfwadm (2.0-style) support
NOTRACK target support
raw table support (required for NOTRACK/TRACE)
IPv6: Netfilter Configuration ---> 和i ptables有关,按默认编成模块就可以了(也可以不用
选择)
Userspace queueing via NETLINK
IP6 tables support (required for filtering/masq/NAT)
limit match support
MAC address match support
Routing header match support
Hop-by-hop and Dst opts header match support
Fragmentation header match support
HL match support
Multiple port match support
Owner match support
netfilter MARK match support
IPv6 Extension Headers Match
AH/ESP match support
Packet Length match support
EUI64 address check
Packet filtering
LOG target support
Packet mangling
MARK target support
raw table support (required for TRACE)
DECnet: Netfilter Configuration --->不用选择
Routing message grabulator (for userland routing daemon)
Bridge: Netfilter Configuration --->
Ethernet Bridge tables (ebtables) support
ebt: broute table support
ebt: filter table support
ebt: nat table support
ebt: 802.3 filter support
ebt: among filter support
ebt: ARP filter support
ebt: IP filter support
ebt: limit match support
ebt: mark filter support
ebt: packet type filter support
ebt: STP filter support
ebt: 802.1Q VLAN filter support
ebt: arp reply target support
ebt: dnat target support
ebt: mark target support
ebt: redirect target support
ebt: snat target support
ebt: log support
<*> IPsec user configuration interface
IP Sec的使用者控制介面,可以直接编成模组
SCTP Configuration (EXPERIMENTAL) --->流控制传输协议。可以不用选择
The SCTP Protocol (EXPERIMENTAL)
SCTP: Debug messages
SCTP: Debug object counts
SCTP: Cookie HMAC Algorithm (HMAC-MD5)
--->
( ) None
( ) HMAC-SHA1
(X) HMAC-MD5
Asynchronous Transfer Mode (ATM) (EXPERIMENTAL)异步传输模式,可以不用选择
Classical IP over ATM (EXPERIMENTAL)可以不用选择
Do NOT send ICMP if no neighbour (EXPERIMENTAL)可以不用选择
LAN Emulation (LANE) support (EXPERIMENTAL) LAN设备的,不用选择
Multi-Protocol Over ATM (MPOA) support (EXPERIMENTAL)可以不用选择
RFC1483/2684 Bridged protocols一种以太网桥接方式,不用选择了
Per-VC IP filter kludge不知道是什么东西,不用选择了
802.1d Ethernet Bridging IEEE 802.1 X是一种标准,基于用户
ID或者设备来鉴定网络客户(或端
口)的身份。这个流程称为"端口层次的身份鉴别"。它采用了远程身份鉴别拨号接入用户服务(RADIUS)的方法,并将其
划分到三个不同的组中:申请者、认证者以及认证服务器。
802.1Q VLAN Support
DECnet Support现在很少这种传输模式,不用选择
DECnet: SIOCGIFCONF support
DECnet: router support (EXPERIMENTAL)
DECnet: use FWMARK value as routing key (EXPERIMENTAL)
ANSI/IEEE 802.2 LLC type 2 Support 802.2可以不用选择
The IPX protocol这个一般来說是Novell系统用的,不用选他
IPX: Full internal IPX network
Appletalk protocol support除非你真的要跟
apple的电脑通讯,不然用不上
Appletalk interfaces support
Apple/Farallon LocalTalk PC support
COPS LocalTalk PC support
Dayna firmware support
Tangent firmware support
Appletalk-IP driver support
IP to Appletalk-IP Encapsulation support
Appletalk-IP to IP Decapsulation support
CCITT X.25 Packet Layer (EXPERIMENTAL)不用选择
LAPB Data Link Driver (EXPERIMENTAL)不用选择
Frame Diverter (EXPERIMENTAL)不用选择
Acorn Econet/AUN protocols (EXPERIMENTAL)不用选择
AUN over UDP 不用选择
Native Econet不用选择
WAN router广域网路由器用的,不用选择了
Fast switching (read help!)
Forwarding between high speed interfaces
QoS and/or fair queueing --->一般不用选择(也可以按默认编译成模块)
QoS:Qulity
of Service好多选项没有用
QoS and/or fair queueing
CBQ packet scheduler
HTB packet scheduler
HFSC packet scheduler
CSZ packet scheduler
ATM pseudo-scheduler
The simplest PRIO pseudoscheduler
RED queue
SFQ queue
TEQL queue
TBF queue
GRED queue
Diffserv field marker
Delay simulator
Ingress Qdisc
QoS support
Rate estimator
Packet classifier API
TC index classifier
Routing table based classifier
Firewall based classifier
U32 classifier
Special RSVP classifier
Special RSVP classifier for IPv6
Traffic policing (needed for in/egress)
Network testing --->这个里面的也没什么用
Packet Generator (USE WITH CAUTION)
Netpoll support for trapping incoming packets不用选择
Netpoll traffic trapping不用选择
Amateur Radio support --->
这个选项可以用来启动无线网络的基本支持,目前的无线网络可以通过公众频率传输数据,如果你有此类设备就可以启用
---Amateur Radio support
---Packet Radio protocols
Amateur Radio AX.25 Level 2 protocol
AX.25 DAMA Slave support
Amateur Radio NET/ROM protocol
Amateur Radio X.25 PLP (Rose)
AX.25 network device drivers --->不用选择了
PACKET通信中文又称分包通信,传送信息的信息包里带有发信人和收信人的地址及控制数据等信息,是一种可以实现复
杂而可靠通信的高级数据方式.PACKET由于使用了完整的AX25协议,因此可以容易地实现诸如文件的上传下载,信件的
接收和发送,远端控制,捆绑其他协议实现更多的功能. AX.25是数据交换网络协议,她描述了DTE(Data Terminal
Equipment)与
DCE(Data Circuit Terminating Equipment)之间如何协调数据交换。 AX.25协议利用面向连
接服务来确保数据包的按序发送,在结构上分三个部分,即物理层,链路层和包封层(在OSI中称网络层)。
IrDA (infrared) subsystem support ---> 红外线传输装置,这个里面我什么也没选
Bluetooth subsystem support --->
蓝牙设备,无线电的东西,没有就不选了
TUX: Threaded linUX application protocol accelerator layer图案应用程序加速协议,可以不用选
择
TUX options --->
External CGI module
extended TUX logging format
debug TUX
Network device support选择自己合适的网卡就可以了,我的是rea ltek
8139的网卡,应该选择
Dummy net driver support可以使IP长久的存在(类固定IP),使Linux可以轻易得到一个 IP addr,
选吧
Bonding driver support
连接数个网路装置让他像是一个,只有一张网卡的話,可以直接不要选,不放心的話也可以直接编成模組,
EQL (serial line load balancing) support不太需要,通常給拨号用
Universal TUN/TAP device driver support不太确定,就直接编成 modules,也可以不用选择
Ethertap network tap可以不用选择
如何在 user-mode系统中启动网路功能?设定一段私人网路包含
user-mode系统以及主系统。然後
user-mode系统
透过原系统转送封包到网路上。确定主系统的核心有支援
Networking --> IP: Netfilter Configuration --> IP tables
support--> Full NAT --> MASQUERADE target support还有 Network Device Support --> Ethertap
network tap,将这两个编译成模组,
General Instruments Surfboard 1000如果你是用cable modem,此处请选
ARCnet devices ---> 如果您没有 ARCnet的设备,可以不理。在这里我不用选了
ARCnet support
Enable standard ARCNet packet format (RFC 1201)
Enable old ARCNet packet format (RFC 1051)
Enable raw mode packet interface
ARCnet COM90xx (normal) chipset driver
ARCnet COM90xx (IO mapped) chipset driver
ARCnet COM90xx (RIM I) chipset driver
ARCnet COM20020 chipset driver
Support for COM20020 on ISA
Support for COM20020 on PCI
Ethernet (10 or 100Mbit) --->
在这里可以详细的选择自己的网卡,我只选择rea ltek
8139的选项,其它的不用选了
Ethernet (10 or 100Mbit)这个一定要选择
Generic Media Independent Interface device support这个也要选择
Sun Happy Meal 10/100baseT support SUN公司的产品,不用选择了
Sun GEM support SUN公司的产品,不用选择了
3COM cards我没有这个卡,不用选择了
3c501 "EtherLink" support
3c503 "EtherLink II" support
3c505 "EtherLink Plus" support
3c507 "EtherLink 16" support (EXPERIMENTAL)
3c509/3c529 (MCA)/3c569B (98)/3c579 "EtherLink III" support
3c515 ISA "Fast EtherLink"
3c590/3c900 series (592/595/597) "Vortex/Boomerang" support
3cr990 series "Typhoon" support
AMD LANCE and PCnet (AT1500 and NE2100) support AMD的网卡,不用选择了
Western Digital/SMC cards西部数据的卡,我没有,不用选择了
WD80*3 support
SMC Ultra support
SMC 9194 support
Racal-Interlan (Micom) NI cards这个卡很少,我没有,不用选择了
< > NI5010 support (EXPERIMENTAL)
NI5210 support
NI6510 support
Tulip family network device support --->我没有这个卡,所以不用选择了
< > AT1700/1720/RE1000Plus(C-Bus) support (EXPERIMENTAL)不用选择
DEPCA, DE10x, DE200, DE201, DE202, DE422 support不用选择
HP 10/100VG PCLAN (ISA, EISA, PCI) support不用选择
Other ISA cards很老的卡了,如果你有就选择吧,我不选了
Cabletron E21xx support
EtherWORKS 3 (DE203, DE204, DE205) support
EtherExpress 16 support
EtherExpressPro support/EtherExpress 10 (i82595) support
HP PCLAN+ (27247B and 27252A) support
HP PCLAN (27245 and other 27xxx series) support
LP486E on board Ethernet
ICL EtherTeam 16i/32 support
NE2000/NE1000 support
Zenith Z-Note support (EXPERIMENTAL)
SEEQ8005 support (EXPERIMENTAL)
EISA, VLB, PCI and on board controllers应该选择
AMD PCnet32 PCI support
AMD 8111 (new PCI lance) support以上两个是AMD公司开发的,不用选择
Enable NAPI support不用选择
Adaptec Starfire/DuraLAN support不用选择
Use Rx Polling (NAPI) (EXPERIMENTAL)不用选择
Ansel Communications EISA 3200 support (EXPERIMENTAL)不用选择
Apricot Xen-II on board Ethernet不用选择
Broadcom 4400 ethernet support (EXPERIMENTAL)一般要选择
Reverse Engineered nForce Ethernet support (EXPERIMENTAL)不用选择
CS89x0 support不用选择
Digi Intl. RightSwitch SE-X support不用选择
EtherExpressPro/100 support (eepro100, original Becker driver)不用选择
Use PIO instead of MMIO不用选择
Networking options --->
<*> Packet socket让
kernel支援
packet的传输,当然要选
MapleBBS內的MMIO也需要这东西,当然要选
<*> Netlink device emulation最好编译成模块(也可以不用选择)
<*> Unix domain sockets
syslogd、x-windows等都是用socket來传输,即便电脑没网路,也需要他,所以是一定要选的 ...
kernel可以自动设定 IP地址,选上吧
Linux可以在不同网域间移动且不需改变
ip的东东不用选择
[ ] IP: ARP daemon support (EXPERIMENTAL)可以不用选择
packet攻击用的东东
IP: Virtual Server Configuration ---> Virtual Server Configuration中的选项设定都用M,按
默认
负载均衡集群是在应用服务器高负载的情况下,由多台节点提供可伸缩的,高负载的服务器组以保证对外提供良好的服务
响应;而LVS就是实现这一功能的技术,它通过使内核支持ipvs来实现LVS/Direct Routing (DR)、LVS/IP Tunnel、
LVS/NAT的功能
(12) IPVS connection table size (the Nth power of 2)
---IPVS transport protocol load balancing support
---IPVS scheduler
---IPVS application helper
---Network packet filtering (replaces ipchains)
IP: Netfilter Configuration ---> 这就是防火墙机制里头的 iptables啦!按默认都编成模
块
IPv6: Netfilter Configuration ---> 和i ptables有关,按默认编成模块就可以了(也可以不用
选择)
raw table support (required for TRACE)
DECnet: Netfilter Configuration --->不用选择
Bridge: Netfilter Configuration --->
<*> IPsec user configuration interface
IP Sec的使用者控制介面,可以直接编成模组
SCTP Configuration (EXPERIMENTAL) --->流控制传输协议。可以不用选择
SCTP: Cookie HMAC Algorithm (HMAC-MD5)
--->
( ) None
( ) HMAC-SHA1
(X) HMAC-MD5
ID或者设备来鉴定网络客户(或端
口)的身份。这个流程称为"端口层次的身份鉴别"。它采用了远程身份鉴别拨号接入用户服务(RADIUS)的方法,并将其
划分到三个不同的组中:申请者、认证者以及认证服务器。
apple的电脑通讯,不然用不上
QoS and/or fair queueing --->一般不用选择(也可以按默认编译成模块)
QoS:Qulity
of Service好多选项没有用
Network testing --->这个里面的也没什么用
这个选项可以用来启动无线网络的基本支持,目前的无线网络可以通过公众频率传输数据,如果你有此类设备就可以启用
---Amateur Radio support
---Packet Radio protocols
AX.25 network device drivers --->不用选择了
PACKET通信中文又称分包通信,传送信息的信息包里带有发信人和收信人的地址及控制数据等信息,是一种可以实现复
杂而可靠通信的高级数据方式.PACKET由于使用了完整的AX25协议,因此可以容易地实现诸如文件的上传下载,信件的
接收和发送,远端控制,捆绑其他协议实现更多的功能. AX.25是数据交换网络协议,她描述了DTE(Data Terminal
Equipment)与
DCE(Data Circuit Terminating Equipment)之间如何协调数据交换。 AX.25协议利用面向连
接服务来确保数据包的按序发送,在结构上分三个部分,即物理层,链路层和包封层(在OSI中称网络层)。
蓝牙设备,无线电的东西,没有就不选了
择
TUX options --->
8139的网卡,应该选择
选吧
连接数个网路装置让他像是一个,只有一张网卡的話,可以直接不要选,不放心的話也可以直接编成模組,
如何在 user-mode系统中启动网路功能?设定一段私人网路包含
user-mode系统以及主系统。然後
user-mode系统
透过原系统转送封包到网路上。确定主系统的核心有支援
Networking --> IP: Netfilter Configuration --> IP tables
support--> Full NAT --> MASQUERADE target support还有 Network Device Support --> Ethertap
network tap,将这两个编译成模组,
General Instruments Surfboard 1000如果你是用cable modem,此处请选
ARCnet devices ---> 如果您没有 ARCnet的设备,可以不理。在这里我不用选了
Ethernet (10 or 100Mbit) --->
在这里可以详细的选择自己的网卡,我只选择rea ltek
8139的选项,其它的不用选了
< > NI5010 support (EXPERIMENTAL)
Tulip family network device support --->我没有这个卡,所以不用选择了
< > AT1700/1720/RE1000Plus(C-Bus) support (EXPERIMENTAL)不用选择
Cabletron E21xx support