lakitu_defconfig: Enable nftables flow offload and flowtable support
Enable the following nftables options to support the new kube-proxy
implementation based on nftables with kernel bypass acceleration
using the netfilter flowtable infrastructure:
- CONFIG_NFT_FLOW_OFFLOAD: Enables offloading of nftables rules to
hardware.
- CONFIG_NF_FLOW_TABLE_INET: Enables the flowtable infrastructure for IPv4
and IPv6.
- CONFIG_NF_FLOW_TABLE_PROCFS: Enables the procfs interface for the
flowtable.
BUG=b/388464961
TEST=presubmit
RELEASE_NOTE=Added support for nftables flow offload and the flowtable
infrastructure.
Change-Id: Ibaa63b5896b4fde6bbd7df7a4d2bc6cf59fac0cc
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/90532
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Kevin Berry <kpberry@google.com>
diff --git a/arch/arm64/configs/lakitu_defconfig b/arch/arm64/configs/lakitu_defconfig
index 8002702..3d4320d 100644
--- a/arch/arm64/configs/lakitu_defconfig
+++ b/arch/arm64/configs/lakitu_defconfig
@@ -1232,7 +1232,7 @@
# CONFIG_NF_TABLES_NETDEV is not set
CONFIG_NFT_NUMGEN=m
CONFIG_NFT_CT=m
-# CONFIG_NFT_FLOW_OFFLOAD is not set
+CONFIG_NFT_FLOW_OFFLOAD=m
CONFIG_NFT_CONNLIMIT=m
CONFIG_NFT_LOG=m
CONFIG_NFT_LIMIT=m
@@ -1253,9 +1253,9 @@
CONFIG_NFT_OSF=m
CONFIG_NFT_TPROXY=m
CONFIG_NFT_SYNPROXY=m
-# CONFIG_NF_FLOW_TABLE_INET is not set
+CONFIG_NF_FLOW_TABLE_INET=m
CONFIG_NF_FLOW_TABLE=m
-# CONFIG_NF_FLOW_TABLE_PROCFS is not set
+CONFIG_NF_FLOW_TABLE_PROCFS=y
CONFIG_NETFILTER_XTABLES=y
CONFIG_NETFILTER_XTABLES_COMPAT=y
diff --git a/arch/x86/configs/lakitu_defconfig b/arch/x86/configs/lakitu_defconfig
index 7d3085f..882b633 100644
--- a/arch/x86/configs/lakitu_defconfig
+++ b/arch/x86/configs/lakitu_defconfig
@@ -1296,7 +1296,7 @@
# CONFIG_NF_TABLES_NETDEV is not set
CONFIG_NFT_NUMGEN=m
CONFIG_NFT_CT=m
-# CONFIG_NFT_FLOW_OFFLOAD is not set
+CONFIG_NFT_FLOW_OFFLOAD=m
CONFIG_NFT_CONNLIMIT=m
CONFIG_NFT_LOG=m
CONFIG_NFT_LIMIT=m
@@ -1317,9 +1317,9 @@
CONFIG_NFT_OSF=m
CONFIG_NFT_TPROXY=m
CONFIG_NFT_SYNPROXY=m
-# CONFIG_NF_FLOW_TABLE_INET is not set
+CONFIG_NF_FLOW_TABLE_INET=m
CONFIG_NF_FLOW_TABLE=m
-# CONFIG_NF_FLOW_TABLE_PROCFS is not set
+CONFIG_NF_FLOW_TABLE_PROCFS=y
CONFIG_NETFILTER_XTABLES=y
CONFIG_NETFILTER_XTABLES_COMPAT=y
