CONFIG_NET=y

# "Foo over UDP" is needed for any application that wants to tunnel
# traffic over UDP, like wireguard et al
CONFIG_NET_FOU=y

CONFIG_RFKILL=y

CONFIG_NETDEVICES=y
CONFIG_TUN=m
CONFIG_VETH=m

CONFIG_VLAN_8021Q=y
CONFIG_BRIDGE=y

CONFIG_PACKET=y
CONFIG_PACKET_DIAG=y
CONFIG_NETLINK_DIAG=y
CONFIG_UNIX=y
CONFIG_UNIX_DIAG=y
CONFIG_INET=y
CONFIG_XFRM_USER=y
CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IP_MULTIPLE_TABLES=y
CONFIG_IPV6_MULTIPLE_TABLES=y
CONFIG_IPV6_SUBTREES=y
CONFIG_IP_ROUTE_VERBOSE=y
CONFIG_SYN_COOKIES=y
CONFIG_INET_UDP_DIAG=y
CONFIG_INET_RAW_DIAG=y

# The following options enable support for IPsec and are enabled by default.
# We think wireguard is the superior solution, and hence disable them.
# CONFIG_INET_XFRM_MODE_TRANSPORT is not set
# CONFIG_INET_XFRM_MODE_TUNNEL is not set
# CONFIG_INET_XFRM_MODE_BEET is not set
# CONFIG_INET6_XFRM_MODE_TRANSPORT is not set
# CONFIG_INET6_XFRM_MODE_TUNNEL is not set
# CONFIG_INET6_XFRM_MODE_BEET is not set

# We do not need IPv6-in-IPv4
# CONFIG_IPV6_SIT is not set