## SECTION=networking

menuconfig NFTABLES
	tristate
	prompt "nftables                      "
	select LIBGMP if !NFTABLES_MGMP
	select READLINE
	select LIBMNL
	select LIBNFTNL
	help
	  nftables is the project that aims to replace the existing
	  {ip,ip6,arp,eb}tables framework. Basically, this project provides
	  a new packet filtering framework, a new userspace utility and also
	  a compatibility layer for {ip,ip6}tables. nftables is built upon
	  the building blocks of the Netfilter infrastructure such as the
	  existing hooks, the connection tracking system, the userspace
	  queueing component and the logging subsystem.
	  Don't forget to enable nf_tables in kernel.

if NFTABLES

config NFTABLES_DEBUG
	bool
	default y
	prompt "enable debug"


config NFTABLES_MGMP
	bool
	prompt "use mini-GMP"
	# broken in v0.5 (seems to be fixed some time after)
	depends on BROKEN
	help
	  use the nftables build-in mini-GMP instead of linking to the shared
	  libgmp. (may reduce debugging verbosity on some files)

endif