[apple/xnu.git] / bsd / conf / MASTER

#
# Mach Operating System
# Copyright (c) 1986 Carnegie-Mellon University
# All rights reserved.  The CMU software License Agreement
# specifies the terms and conditions for use and redistribution.
#  
#######################################################################
#
#	Master machine independent configuration file.
#
#	Specific configuration files are created based on this and
#	the machine specific master file using the doconf script.
#
#	Any changes to the master configuration files will affect all
#	other configuration files based upon it.
#
#######################################################################
#
#	To build a configuration, execute "doconf <configuration>."
#	Configurations are specified in the "Configurations:" section
#	of the MASTER and MASTER.* files as follows:
#
#	<configuration> = [ <attribute0> <attribute1> ... <attributeN> ]
#
#	Lines in the MASTER and MASTER.* files are selected based on
#	the attribute selector list, found in a comment at the end of
#	the line.  This is a list of attributes separated by commas.
#	The "!" operator selects the line if none of the attributes are
#	specified.
#
#	For example:
#
#	<foo,bar>	selects a line if "foo" or "bar" are specified.
#	<!foo,bar>	selects a line if neither "foo" nor "bar" is
#			specified.
#
#	Lines with no attributes specified are selected for all
#	configurations.
#
#######################################################################
#
#  STANDARD CONFIGURATION OPTIONS (select any combination)
#
#	debug   = extra kernel level debugging support
#	mach    = Mach support 
#
#  EXPERIMENTAL CONFIGURATION OPTIONS (select any combination, carefully)
#
#	host	= host resource control support
#
#  MULTI-PROCESSOR CONFIGURATION (select at most one)
#
#	multi16 = enable 16 multi-processors
#	multi32 = enable 32 multi-processors
#	multi48 = enable 48 multi-processors
#
#  SYSTEM SIZE CONFIGURATION (select exactly one)
#
#	xlarge = extra large scale system configuration
#	large  = large scale system configuration
#	medium = medium scale system configuration
#	small  = small scale system configuration
#	xsmall = extra small scale system configuration
#	bsmall = special extra small scale system configuration 
#
#######################################################################
#  
#  Standard Mach Research Configurations:
#  -------- ---- -------- ---------------
#
#  These are the default configurations that can be used by most sites.
#  They are used internally by the Mach project.
#
#  MACH      = [mach multi16 medium debug]
#
#######################################################################
#
ident		NeXT

# obsolete timezone spec
options		TIMEZONE=0, PST=0

options		QUOTA			# 				# <quota>
options		INET			#				# <inet>
options		ABSOLUTETIME_SCALAR_TYPE
options		NEW_VM_CODE	#				# <newvm>
options		OLD_VM_CODE	#				# <!newvm>
options		HW_AST		# Hardware ast support		# <hw_ast>
options 	HW_FOOTPRINT	# Cache footprint support	# <hw_foot>
options		CONFIG_LCTX	# Login Context

options 	MACH		# Standard Mach features	# <mach>
options		MACH_ASSERT	# Compile in assertions		# <mach_assert>
options		MACH_COMPAT	# Vendor syscall compatibility  # <mach>
options		MACH_COUNTERS	# counters			# <count>
options		MACH_DEBUG	# IPC debugging interface	# <mdebug>
options		MACH_FASTLINK	# Fast symbolic links
options		MACH_FIXPRI	# Fixed priority threads	# <fixpri>
options		MACH_HOST	# Mach host (resource alloc.)	# <host>
options		MACH_IPC_COMPAT	# Enable old IPC interface	# <ipc_compat>
options		MACH_IPC_DEBUG	# Enable IPC debugging calls	# <ipc_debug>
options		MACH_IPC_TEST	# Testing code/printfs		# <ipc_test>
options		MACH_LDEBUG	# Sanity-check simple locking	# <test>
options 	MACH_NP		# Mach IPC support		# <np>
options		MACH_NBC	# No buffer cache		# <nbc>
options		MACH_NET	# Fast network access		# <mach_net>
options		MACH_XP		# external pager support	# <xp>
options		NORMA_IPC	# NORMA IPC support		# <norma_ipc>
options		NORMA_DEVICE	# NORMA unified device names	# <norma_device>
options		NORMA_VM	# NORMA virtual memory support	# <norma_vm>
options		NORMA_TASK	# NORMA task support		# <norma_task>
options		NORMA_ETHER	# NORMA across ethernet		# <norma_ether>
options		SIMPLE_CLOCK	# don't assume fixed tick	# <simple_clock>
options		XPR_DEBUG	# kernel tracing		# <xpr_debug>
options		KDEBUG		# kernel tracing		# <kdebug>
options		DDM_DEBUG	# driverkit-style tracing	# <ddm_debug>
options		MACH_OLD_VM_COPY # Old vm_copy technology	# <!newvm>
options		NO_DIRECT_RPC	# for untyped mig servers	# 
options		IPX		# ipx stack 			# <ipx>
options		EON		# 				# <eon>
options		ISO		# ISO stack			# <iso>
options		LLC		# 802.2 support			# <llc>
options		LOOP		# loopback support		# <loop>
options		MROUTING	# multicast routing		# <mrouting>
options		ROUTING		# routing			# <routing>
options		NETMIBS		#				# <netmibs>
options		VLAN		#				# <vlan>
options		BOND		#				# <bond>
options		PF		# Packet Filter			# <pf>
options		PF_PKTHDR	# PF tag inside mbuf pkthdr	# <pf_pkthdr>
options		PKT_PRIORITY	# Packet priority support	# <pkt_priority>
options		PFLOG		# PF log interface		# <pflog>
options		IPDIVERT        # Divert sockets (for NAT)      # <ipdivert>
options		IPFLOW		# IP fast forwarding		# <ipflow>
options		IPFIREWALL      # IP Firewalling (used by NAT)  # <ipfirewall>
options		IPFIREWALL_FORWARD      #Transparent proxy      # <ipfirewall>
options		IPFIREWALL_DEFAULT_TO_ACCEPT    # allow everything by default   # <ipfirewall>
options		DUMMYNET	# dummynet support		# <dummynet>
options		TRAFFIC_MGT	# traffic management support		# <traffic_mgt>
options		IPFW2		# IP firewall (new version)	# <ipfw2>
options		MULTICAST	# Internet Protocol Class-D	$
options		TCPDEBUG	# TCP debug			# <tcpdebug>
options		RANDOM_IP_ID	# random (not sequential) ip ids	# <randomipid>
options		TCP_DROP_SYNFIN	# Drop TCP packets with SYN+FIN set	# <tcpdrop_synfin>
options		ICMP_BANDLIM	# ICMP bandwidth limiting sysctl
options		IFNET_INPUT_SANITY_CHK	# allow dlil/ifnet input sanity check # <ifnet_input_chk>
options		IFNET_ROUTE_REFCNT # count route references to ifnet	# <ifnet_route_refcnt>
options		SYSV_SEM	# SVID semaphores			# <sysv_sem>
options		SYSV_MSG	# SVID messages				# <sysv_msg>
options		SYSV_SHM	# SVID shared mem			# <sysv_shm>
options		PSYNCH		# pthread synch				# <psynch>
options		PANIC_INFO	# want kernel panic info	# <panic_info>
options		DEVELOPMENT	# dev kernel				# <development>

# secure_kernel - secure kernel from user programs
options     SECURE_KERNEL       # <secure_kernel> 

options     OLD_SEMWAIT_SIGNAL  # old semwait_signal handler

#
#	4.4 general kernel 
#
options		SOCKETS		# socket support			# <inet, inet6, netat>
options 	DIAGNOSTIC	# diagnostics				# <diagnostic>
options		CONFIG_DTRACE	# dtrace support			# <config_dtrace>
options		GPROF		# build profiling			# <profile>
options		SENDFILE	# sendfile					# <sendfile>
options		NETWORKING	# networking layer			# <inet, inet6, netat>
options		CONFIG_FSE	# file system events		# <config_fse>
options		CONFIG_IMAGEBOOT	# local image boot	# <config_imageboot>
options		CONFIG_SOWUPCALL	# SB_UPCALL on sowwakeup	# <config_sowupcall>
options		CONFIG_MBUF_NOEXPAND	# limit mbuf expansion	# <config_mbuf_noexpand>
options		CONFIG_MBUF_JUMBO	# jumbo cluster pool	# <config_mbuf_jumbo>
options		CONFIG_MBUF_TAGS_MALLOC # use malloc for tags	# <config_mbuf_tags_malloc>
options		CONFIG_FORCE_OUT_IFP	# Enable IP_FORCE_OUT_IFP # <config_force_out_ifp>
options		CONFIG_IFEF_NOWINDOWSCALE # Scale TCP window per driver # <config_ifef_nowindowscale>

options		CONFIG_WORKQUEUE	# <config_workqueue>


#
#	4.4 filesystems 
#
options		FFS			# Fast Filesystem Support	# <ffs>
options		HFS			# HFS/HFS+ support		# <hfs>
options		FIFO		# fifo support			# <fifo>
options		UNION		# union_fs support		# <union>
options		FDESC		# fdesc_fs support		# <fdesc>
options		DEVFS		# devfs support			# <devfs>
options		JOURNALING	# journaling support	# <journaling>
options		HFS_COMPRESSION	# hfs compression	# <hfs_compression>
options		CONFIG_HFS_TRIM	# HFS trims unused blocks	# <config_hfs_trim>

#
#	file system features
#
options		QUOTA		# file system quotas		# <quota>
options		REV_ENDIAN_FS	# Reverse Endian FS		# <revfs>
options		NAMEDSTREAMS	# named stream vnop support	# <namedstreams>
options		CONFIG_VOLFS	# volfs path support (legacy)	# <config_volfs>
options		CONFIG_IMGSRC_ACCESS # source of imageboot dmg	# <config_imgsrc_access>

#
# NFS support
#
options		NFSCLIENT	# Be an NFS client		# <nfsclient>
options		NFSSERVER	# Be an NFS server		# <nfsserver>

#
# AppleTalk Support
#
options		NETAT			# AppleTalk support				# <netat>
#options		AURP_SUPPORT    # AppleTalk Update Routing      # <netat>

#
# Machine Independent Apple Features
#
options		KERNSERV	# kernel_server intarface	# <kernserv>
options		MALLOCDEBUG	# kernel malloc debugging	# <mallocdebug>
options		DRIVERKIT 	# driverkit support		# <driverkit>
options		KERNOBJC	# Objective-C support		# <kernobjc>
options		OBJCTEST	# Objc internal test		# <objctest>
options		KERNEL_STACK	# MI kernel stack support	# <kernstack>
profile						# build a profiling kernel	# <profile>

#
#  Point-to-Point Protocol support
#
pseudo-device ppp 2						# <ppp>

#       
# IPv6 Support
#       
options         "INET6"         		# kernel IPv6 Support           # <inet6>
options         IPSEC                  		# IP security            	# <ipsec>
options         IPSEC_ESP              		# IP security            	# <ipsec>
options         "IPV6FIREWALL"         		# IPv6 Firewall Feature   	# <ipv6firewall>
options         "IPV6FIREWALL_DEFAULT_TO_ACCEPT"	#IPv6 Firewall Feature   	# <ipv6firewall>
#options         "IPV6FIREWALL_VERBOSE" 		#IPv6 Firewall Feature   	# <ipv6firewall>

pseudo-device   gif     1		# <gif>
pseudo-device   dummy   2		# <dummy>
pseudo-device   faith   1		# <faith>
pseudo-device   stf 	1 		# <stf>

options			crypto			# <ipsec,crypto>
options			ALLCRYPTO		# <xlarge,large,medium>
options			randomipid		# <inet,randomipid>

options		ZLIB		# inflate/deflate support	# <zlib>


makeoptions	LIBDRIVER = "libDriver_kern.o"			# <libdriver>
makeoptions	LIBOBJC   = "libkobjc.o"			# <kernobjc>

maxusers	64		# <xlarge>
maxusers	50		# <large>
maxusers	32		# <medium>
maxusers	16		# <small>
maxusers	8		# <xsmall>
maxusers	2		# <bsmall>

#
#  Multi-processor selection
#
pseudo-device	cpus		64	# <multi64>
pseudo-device	cpus		32	# <multi32>
pseudo-device	cpus		16	# <multi16>
pseudo-device	cpus		2	# <multi2>
pseudo-device	cpus		1	# <!multi64,multi32,multi16,multi2>

#
#  configurable kernel event related resources 
#
options   CONFIG_KN_HASHSIZE=64		# <medium,large,xlarge>
options   CONFIG_KN_HASHSIZE=48		# <small,xsmall>
options   CONFIG_KN_HASHSIZE=20		# <bsmall>

#
#  configurable vfs related resources 
#  CONFIG_VNODES - used to pre allocate vnode related resources 
#  CONFIG_VNODE_FREE_MIN - mininmum number of free vnodes 
#  CONFIG_NC_HASH - name cache hash table allocation
#  CONFIG_VFS_NAMES - name strings
#
#  263168 magic number for medium CONFIG_VNODES is based on memory 
#  Number vnodes  is (memsize/64k) + 1024 
#  This is the calculation that is used by launchd in tiger
#  we are clipping the max based on 16G 
#  ie ((16*1024*1024*1024)/(64 *1024)) + 1024 = 263168;

options   CONFIG_VNODES=263168		# <large,xlarge>
options   CONFIG_VNODES=263168		# <medium>
options   CONFIG_VNODES=10240		# <small>
options   CONFIG_VNODES=1024		# <xsmall>
options   CONFIG_VNODES=750			# <bsmall>

options   CONFIG_VNODE_FREE_MIN=500		# <large,xlarge>
options   CONFIG_VNODE_FREE_MIN=300		# <medium>
options   CONFIG_VNODE_FREE_MIN=200		# <small>
options   CONFIG_VNODE_FREE_MIN=100		# <xsmall>
options   CONFIG_VNODE_FREE_MIN=75		# <bsmall>

options   CONFIG_NC_HASH=5120		# <large,xlarge>
options   CONFIG_NC_HASH=4096		# <medium>
options   CONFIG_NC_HASH=2048		# <small,xsmall>
options   CONFIG_NC_HASH=1024		# <bsmall>

options   CONFIG_VFS_NAMES=5120		# <large,xlarge>
options   CONFIG_VFS_NAMES=4096		# <medium>
options   CONFIG_VFS_NAMES=3072		# <small,xsmall>
options   CONFIG_VFS_NAMES=2048		# <bsmall>

options   CONFIG_MAX_CLUSTERS=8		# <xlarge,large,medium>
options   CONFIG_MAX_CLUSTERS=4		# <small,xsmall,bsmall>

#
#  configurable kauth credential related resources 
#
options   KAUTH_CRED_PRIMES_COUNT=7		# <medium,large,xlarge>
options   KAUTH_CRED_PRIMES_COUNT=3		# <bsmall,xsmall,small>

options   KAUTH_CRED_PRIMES="{97, 241, 397, 743, 1499, 3989, 7499}"		# <medium,large,xlarge>
options   KAUTH_CRED_PRIMES="{5, 17, 97}"								# <bsmall,xsmall,small>

#
#  configurable options for minumum number of buffers for kernel memory 
#
options   CONFIG_MIN_NBUF=256		# <medium,large,xlarge>
options   CONFIG_MIN_NBUF=128		# <small>
options   CONFIG_MIN_NBUF=80		# <xsmall>
options   CONFIG_MIN_NBUF=64		# <bsmall>

options   CONFIG_MIN_NIOBUF=128		# <medium,large,xlarge>
options   CONFIG_MIN_NIOBUF=64		# <xsmall,small>
options   CONFIG_MIN_NIOBUF=32		# <bsmall>

#
# set maximum space used for packet buffers
#
options        CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)"		# <large,xlarge>
options        CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)"		# <medium>
options        CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)"		# <bsmall,xsmall,small>

#
# set maximum space used for packet buffers
#
options CONFIG_USESOCKTHRESHOLD=1	# <large,xlarge,medium>
options CONFIG_USESOCKTHRESHOLD=0	# <bsmall,xsmall,small>

#
# Configure size of TCP hash table
#
options CONFIG_TCBHASHSIZE=4096		# <medium,large,xlarge>
options CONFIG_TCBHASHSIZE=128		# <xsmall,small,bsmall>

#
#  configurable async IO options 
#  CONFIG_AIO_MAX - system wide limit of async IO requests.
#  CONFIG_AIO_PROCESS_MAX - process limit of async IO requests.
#  CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created.
#
options   CONFIG_AIO_MAX=360		# <xlarge>
options   CONFIG_AIO_MAX=180		# <large>
options   CONFIG_AIO_MAX=90			# <medium>
options   CONFIG_AIO_MAX=45			# <small>
options   CONFIG_AIO_MAX=20			# <xsmall>
options   CONFIG_AIO_MAX=10			# <bsmall>

options   CONFIG_AIO_PROCESS_MAX=64		# <xlarge>
options   CONFIG_AIO_PROCESS_MAX=32		# <large>
options   CONFIG_AIO_PROCESS_MAX=16		# <medium>
options   CONFIG_AIO_PROCESS_MAX=12		# <small>
options   CONFIG_AIO_PROCESS_MAX=8		# <xsmall>
options   CONFIG_AIO_PROCESS_MAX=4		# <bsmall>

options   CONFIG_AIO_THREAD_COUNT=16	# <xlarge>
options   CONFIG_AIO_THREAD_COUNT=8		# <large>
options   CONFIG_AIO_THREAD_COUNT=4		# <medium>
options   CONFIG_AIO_THREAD_COUNT=3		# <small>
options   CONFIG_AIO_THREAD_COUNT=2		# <xsmall,bsmall>

#
#  configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in 
#  sync with osfmk/conf/MASTER until we fix the config system...) todo XXX
#
options   CONFIG_THREAD_MAX=2560		# <medium,large,xlarge>
options   CONFIG_THREAD_MAX=1536		# <small,xsmall>
options   CONFIG_THREAD_MAX=1024		# <bsmall>

options   CONFIG_MAXVIFS=32				# <medium,large,xlarge>
options   CONFIG_MAXVIFS=16				# <small,xsmall>
options   CONFIG_MAXVIFS=2				# <bsmall>

options   CONFIG_MFCTBLSIZ=256			# <medium,large,xlarge>
options   CONFIG_MFCTBLSIZ=128			# <small,xsmall>
options   CONFIG_MFCTBLSIZ=16			# <bsmall>

#
#  configurable kernel - use these options to strip strings from panic
#  and printf calls.
#  no_panic_str - saves around 50K of kernel footprint.
#  no_printf_str - saves around 45K of kernel footprint.
#
options   CONFIG_NO_PANIC_STRINGS		# <no_panic_str>
options   CONFIG_NO_PRINTF_STRINGS		# <no_printf_str>
options   CONFIG_NO_KPRINTF_STRINGS		# <no_kprintf_str>

#
# configurable kernel - general switch to say we are building for an
# embedded device
#
options   CONFIG_EMBEDDED			# <config_embedded>

# only execute signed code. Hang this off config_embedded since there's
# nothing more appropriate right now
#
options   CONFIG_ENFORCE_SIGNED_CODE		# <config_embedded>

# support dynamic signing of code
#
options		CONFIG_DYNAMIC_CODE_SIGNING	# <dynamic_codesigning>

#
# code decryption... used on embedded for app protection
# must be set in all the bsd/conf and osfmk/conf MASTER files
#
options		CONFIG_CODE_DECRYPTION	# <config_embedded>

#
# User Content Protection, used on embedded
#

options		CONFIG_PROTECT	# <config_protect>


#
#  Ethernet (ARP)
#
pseudo-device	ether			# <networking,inet,inet6,netat>
#
#  Network loopback device
#
pseudo-device	loop			# <networking,inet,inet6,netat>
#
#  UCB pseudo terminal service
#
pseudo-device  pty     512 init pty_init       # <xlarge>
pseudo-device  pty     256 init pty_init       # <large>
pseudo-device  pty     128 init pty_init       # <medium>
pseudo-device  pty      48 init pty_init       # <small>
pseudo-device  pty      16 init pty_init       # <xsmall>
pseudo-device  pty       8 init pty_init       # <bsmall>
#
# Cloning pseudo terminal service
#
pseudo-device	ptmx	1 init ptmx_init

#
# vnode device
#
pseudo-device  vndevice	   16       init    vndevice_init   # <xlarge>
pseudo-device  vndevice		8       init    vndevice_init   # <large>
pseudo-device  vndevice		4       init    vndevice_init   # <medium>
pseudo-device  vndevice		3       init    vndevice_init   # <small>
pseudo-device  vndevice		2       init    vndevice_init   # <bsmall>

#
# memory device
pseudo-device	mdevdevice	1	init	mdevinit

#
#
# packet filter device
#
pseudo-device	bpfilter	4	init	bpf_init		# <networking,inet,inet6,netat>

#
# fsevents device
pseudo-device	fsevents	1	init	fsevents_init	# <config_fse>

#
#  shim to "linux" mach disk drivers  (mach drivers must also be turned on)
#
# now using iokit disk shim, this is code is obsolete
#pseudo-device diskshim

pseudo-device	random		1	init	random_init
pseudo-device	dtrace		1	init	dtrace_init	# <config_dtrace>
pseudo-device	helper		1	init	helper_init	# <config_dtrace>
pseudo-device	lockstat	1	init	lockstat_init	# <config_dtrace>
pseudo-device	sdt		1	init	sdt_init	# <config_dtrace>
pseudo-device	systrace	1	init	systrace_init	# <config_dtrace>
pseudo-device	fbt		1	init	fbt_init	# <config_dtrace>
pseudo-device	profile_prvd	1	init	profile_init	# <config_dtrace>
Commit	Line	Data
1c79356b A	1	#
	2	# Mach Operating System
	3	# Copyright (c) 1986 Carnegie-Mellon University
	4	# All rights reserved. The CMU software License Agreement
	5	# specifies the terms and conditions for use and redistribution.
	6	#
	7	#######################################################################
	8	#
	9	# Master machine independent configuration file.
	10	#
	11	# Specific configuration files are created based on this and
	12	# the machine specific master file using the doconf script.
	13	#
	14	# Any changes to the master configuration files will affect all
	15	# other configuration files based upon it.
	16	#
	17	#######################################################################
	18	#
	19	# To build a configuration, execute "doconf <configuration>."
	20	# Configurations are specified in the "Configurations:" section
	21	# of the MASTER and MASTER.* files as follows:
	22	#
	23	# <configuration> = [ <attribute0> <attribute1> ... <attributeN> ]
	24	#
	25	# Lines in the MASTER and MASTER.* files are selected based on
	26	# the attribute selector list, found in a comment at the end of
	27	# the line. This is a list of attributes separated by commas.
	28	# The "!" operator selects the line if none of the attributes are
	29	# specified.
	30	#
	31	# For example:
	32	#
	33	# <foo,bar> selects a line if "foo" or "bar" are specified.
	34	# <!foo,bar> selects a line if neither "foo" nor "bar" is
	35	# specified.
	36	#
	37	# Lines with no attributes specified are selected for all
	38	# configurations.
	39	#
	40	#######################################################################
	41	#
	42	# STANDARD CONFIGURATION OPTIONS (select any combination)
	43	#
	44	# debug = extra kernel level debugging support
	45	# mach = Mach support
	46	#
	47	# EXPERIMENTAL CONFIGURATION OPTIONS (select any combination, carefully)
	48	#
1c79356b	49	# host = host resource control support
1c79356b A	50	#
	51	# MULTI-PROCESSOR CONFIGURATION (select at most one)
	52	#
	53	# multi16 = enable 16 multi-processors
	54	# multi32 = enable 32 multi-processors
	55	# multi48 = enable 48 multi-processors
	56	#
	57	# SYSTEM SIZE CONFIGURATION (select exactly one)
	58	#
	59	# xlarge = extra large scale system configuration
	60	# large = large scale system configuration
	61	# medium = medium scale system configuration
	62	# small = small scale system configuration
	63	# xsmall = extra small scale system configuration
2d21ac55	64	# bsmall = special extra small scale system configuration
1c79356b A	65	#
	66	#######################################################################
	67	#
	68	# Standard Mach Research Configurations:
	69	# -------- ---- -------- ---------------
	70	#
	71	# These are the default configurations that can be used by most sites.
	72	# They are used internally by the Mach project.
	73	#
	74	# MACH = [mach multi16 medium debug]
	75	#
	76	#######################################################################
	77	#
	78	ident NeXT
	79
	80	# obsolete timezone spec
	81	options TIMEZONE=0, PST=0
	82
2d21ac55 A	83	options QUOTA # # <quota>
2d21ac55 A	84	options INET # # <inet>
0b4e3aa0	85	options ABSOLUTETIME_SCALAR_TYPE
1c79356b A	86	options NEW_VM_CODE # # <newvm>
	87	options OLD_VM_CODE # # <!newvm>
	88	options HW_AST # Hardware ast support # <hw_ast>
	89	options HW_FOOTPRINT # Cache footprint support # <hw_foot>
2d21ac55 A	90	options CONFIG_LCTX # Login Context
2d21ac55 A	91
1c79356b	92	options MACH # Standard Mach features # <mach>
2d21ac55	93	options MACH_ASSERT # Compile in assertions # <mach_assert>
1c79356b A	94	options MACH_COMPAT # Vendor syscall compatibility # <mach>
	95	options MACH_COUNTERS # counters # <count>
	96	options MACH_DEBUG # IPC debugging interface # <mdebug>
	97	options MACH_FASTLINK # Fast symbolic links
	98	options MACH_FIXPRI # Fixed priority threads # <fixpri>
	99	options MACH_HOST # Mach host (resource alloc.) # <host>
	100	options MACH_IPC_COMPAT # Enable old IPC interface # <ipc_compat>
	101	options MACH_IPC_DEBUG # Enable IPC debugging calls # <ipc_debug>
	102	options MACH_IPC_TEST # Testing code/printfs # <ipc_test>
	103	options MACH_LDEBUG # Sanity-check simple locking # <test>
	104	options MACH_NP # Mach IPC support # <np>
	105	options MACH_NBC # No buffer cache # <nbc>
1c79356b A	106	options MACH_NET # Fast network access # <mach_net>
	107	options MACH_XP # external pager support # <xp>
	108	options NORMA_IPC # NORMA IPC support # <norma_ipc>
	109	options NORMA_DEVICE # NORMA unified device names # <norma_device>
	110	options NORMA_VM # NORMA virtual memory support # <norma_vm>
	111	options NORMA_TASK # NORMA task support # <norma_task>
	112	options NORMA_ETHER # NORMA across ethernet # <norma_ether>
	113	options SIMPLE_CLOCK # don't assume fixed tick # <simple_clock>
1c79356b A	114	options XPR_DEBUG # kernel tracing # <xpr_debug>
	115	options KDEBUG # kernel tracing # <kdebug>
	116	options DDM_DEBUG # driverkit-style tracing # <ddm_debug>
	117	options MACH_OLD_VM_COPY # Old vm_copy technology # <!newvm>
	118	options NO_DIRECT_RPC # for untyped mig servers #
	119	options IPX # ipx stack # <ipx>
	120	options EON # # <eon>
	121	options ISO # ISO stack # <iso>
	122	options LLC # 802.2 support # <llc>
	123	options LOOP # loopback support # <loop>
	124	options MROUTING # multicast routing # <mrouting>
1c79356b	125	options ROUTING # routing # <routing>
2d21ac55	126	options NETMIBS # # <netmibs>
1c79356b	127	options VLAN # # <vlan>
91447636	128	options BOND # # <bond>
b0d623f7 A	129	options PF # Packet Filter # <pf>
b0d623f7 A	130	options PF_PKTHDR # PF tag inside mbuf pkthdr # <pf_pkthdr>
d1ecb069	131	options PKT_PRIORITY # Packet priority support # <pkt_priority>
b0d623f7	132	options PFLOG # PF log interface # <pflog>
2d21ac55	133	options IPDIVERT # Divert sockets (for NAT) # <ipdivert>
b0d623f7	134	options IPFLOW # IP fast forwarding # <ipflow>
2d21ac55 A	135	options IPFIREWALL # IP Firewalling (used by NAT) # <ipfirewall>
	136	options IPFIREWALL_FORWARD #Transparent proxy # <ipfirewall>
	137	options IPFIREWALL_DEFAULT_TO_ACCEPT # allow everything by default # <ipfirewall>
91447636	138	options DUMMYNET # dummynet support # <dummynet>
2d21ac55	139	options TRAFFIC_MGT # traffic management support # <traffic_mgt>
91447636	140	options IPFW2 # IP firewall (new version) # <ipfw2>
1c79356b	141	options MULTICAST # Internet Protocol Class-D $
9bccf70c A	142	options TCPDEBUG # TCP debug # <tcpdebug>
	143	options RANDOM_IP_ID # random (not sequential) ip ids # <randomipid>
	144	options TCP_DROP_SYNFIN # Drop TCP packets with SYN+FIN set # <tcpdrop_synfin>
	145	options ICMP_BANDLIM # ICMP bandwidth limiting sysctl
2d21ac55	146	options IFNET_INPUT_SANITY_CHK # allow dlil/ifnet input sanity check # <ifnet_input_chk>
d1ecb069	147	options IFNET_ROUTE_REFCNT # count route references to ifnet # <ifnet_route_refcnt>
2d21ac55 A	148	options SYSV_SEM # SVID semaphores # <sysv_sem>
	149	options SYSV_MSG # SVID messages # <sysv_msg>
	150	options SYSV_SHM # SVID shared mem # <sysv_shm>
b0d623f7	151	options PSYNCH # pthread synch # <psynch>
2d21ac55 A	152	options PANIC_INFO # want kernel panic info # <panic_info>
2d21ac55 A	153	options DEVELOPMENT # dev kernel # <development>
1c79356b	154
2d21ac55 A	155	# secure_kernel - secure kernel from user programs
2d21ac55 A	156	options SECURE_KERNEL # <secure_kernel>
1c79356b	157
b0d623f7 A	158	options OLD_SEMWAIT_SIGNAL # old semwait_signal handler
b0d623f7 A	159
1c79356b A	160	#
	161	# 4.4 general kernel
	162	#
2d21ac55	163	options SOCKETS # socket support # <inet, inet6, netat>
1c79356b	164	options DIAGNOSTIC # diagnostics # <diagnostic>
2d21ac55	165	options CONFIG_DTRACE # dtrace support # <config_dtrace>
55e303ae	166	options GPROF # build profiling # <profile>
2d21ac55 A	167	options SENDFILE # sendfile # <sendfile>
	168	options NETWORKING # networking layer # <inet, inet6, netat>
	169	options CONFIG_FSE # file system events # <config_fse>
	170	options CONFIG_IMAGEBOOT # local image boot # <config_imageboot>
	171	options CONFIG_SOWUPCALL # SB_UPCALL on sowwakeup # <config_sowupcall>
2d21ac55 A	172	options CONFIG_MBUF_NOEXPAND # limit mbuf expansion # <config_mbuf_noexpand>
2d21ac55 A	173	options CONFIG_MBUF_JUMBO # jumbo cluster pool # <config_mbuf_jumbo>
b0d623f7 A	174	options CONFIG_MBUF_TAGS_MALLOC # use malloc for tags # <config_mbuf_tags_malloc>
	175	options CONFIG_FORCE_OUT_IFP # Enable IP_FORCE_OUT_IFP # <config_force_out_ifp>
	176	options CONFIG_IFEF_NOWINDOWSCALE # Scale TCP window per driver # <config_ifef_nowindowscale>
593a1d5f A	177
593a1d5f A	178	options CONFIG_WORKQUEUE # <config_workqueue>
1c79356b	179
b0d623f7	180
1c79356b A	181	#
	182	# 4.4 filesystems
	183	#
2d21ac55 A	184	options FFS # Fast Filesystem Support # <ffs>
2d21ac55 A	185	options HFS # HFS/HFS+ support # <hfs>
1c79356b	186	options FIFO # fifo support # <fifo>
1c79356b A	187	options UNION # union_fs support # <union>
1c79356b A	188	options FDESC # fdesc_fs support # <fdesc>
1c79356b	189	options DEVFS # devfs support # <devfs>
2d21ac55	190	options JOURNALING # journaling support # <journaling>
b0d623f7	191	options HFS_COMPRESSION # hfs compression # <hfs_compression>
060df5ea	192	options CONFIG_HFS_TRIM # HFS trims unused blocks # <config_hfs_trim>
2d21ac55 A	193
	194	#
	195	# file system features
	196	#
	197	options QUOTA # file system quotas # <quota>
	198	options REV_ENDIAN_FS # Reverse Endian FS # <revfs>
	199	options NAMEDSTREAMS # named stream vnop support # <namedstreams>
	200	options CONFIG_VOLFS # volfs path support (legacy) # <config_volfs>
b7266188	201	options CONFIG_IMGSRC_ACCESS # source of imageboot dmg # <config_imgsrc_access>
1c79356b A	202
	203	#
	204	# NFS support
	205	#
2d21ac55 A	206	options NFSCLIENT # Be an NFS client # <nfsclient>
2d21ac55 A	207	options NFSSERVER # Be an NFS server # <nfsserver>
1c79356b A	208
	209	#
	210	# AppleTalk Support
	211	#
2d21ac55	212	options NETAT # AppleTalk support # <netat>
0c530ab8	213	#options AURP_SUPPORT # AppleTalk Update Routing # <netat>
2d21ac55	214
1c79356b A	215	#
	216	# Machine Independent Apple Features
	217	#
	218	options KERNSERV # kernel_server intarface # <kernserv>
	219	options MALLOCDEBUG # kernel malloc debugging # <mallocdebug>
	220	options DRIVERKIT # driverkit support # <driverkit>
	221	options KERNOBJC # Objective-C support # <kernobjc>
	222	options OBJCTEST # Objc internal test # <objctest>
	223	options KERNEL_STACK # MI kernel stack support # <kernstack>
2d21ac55	224	profile # build a profiling kernel # <profile>
1c79356b	225
9bccf70c A	226	#
	227	# Point-to-Point Protocol support
	228	#
	229	pseudo-device ppp 2 # <ppp>
	230
1c79356b	231	#
9bccf70c	232	# IPv6 Support
1c79356b A	233	#
1c79356b A	234	options "INET6" # kernel IPv6 Support # <inet6>
1c79356b A	235	options IPSEC # IP security # <ipsec>
	236	options IPSEC_ESP # IP security # <ipsec>
	237	options "IPV6FIREWALL" # IPv6 Firewall Feature # <ipv6firewall>
91447636 A	238	options "IPV6FIREWALL_DEFAULT_TO_ACCEPT" #IPv6 Firewall Feature # <ipv6firewall>
91447636 A	239	#options "IPV6FIREWALL_VERBOSE" #IPv6 Firewall Feature # <ipv6firewall>
9bccf70c A	240
9bccf70c A	241	pseudo-device gif 1 # <gif>
1c79356b A	242	pseudo-device dummy 2 # <dummy>
1c79356b A	243	pseudo-device faith 1 # <faith>
9bccf70c A	244	pseudo-device stf 1 # <stf>
	245
	246	options crypto # <ipsec,crypto>
2d21ac55 A	247	options ALLCRYPTO # <xlarge,large,medium>
	248	options randomipid # <inet,randomipid>
	249
	250	options ZLIB # inflate/deflate support # <zlib>
1c79356b	251
b7266188	252
1c79356b A	253	makeoptions LIBDRIVER = "libDriver_kern.o" # <libdriver>
	254	makeoptions LIBOBJC = "libkobjc.o" # <kernobjc>
	255
	256	maxusers 64 # <xlarge>
	257	maxusers 50 # <large>
	258	maxusers 32 # <medium>
	259	maxusers 16 # <small>
2d21ac55	260	maxusers 8 # <xsmall>
1c79356b A	261	maxusers 2 # <bsmall>
	262
	263	#
	264	# Multi-processor selection
	265	#
	266	pseudo-device cpus 64 # <multi64>
	267	pseudo-device cpus 32 # <multi32>
	268	pseudo-device cpus 16 # <multi16>
	269	pseudo-device cpus 2 # <multi2>
	270	pseudo-device cpus 1 # <!multi64,multi32,multi16,multi2>
	271
2d21ac55 A	272	#
	273	# configurable kernel event related resources
	274	#
	275	options CONFIG_KN_HASHSIZE=64 # <medium,large,xlarge>
	276	options CONFIG_KN_HASHSIZE=48 # <small,xsmall>
	277	options CONFIG_KN_HASHSIZE=20 # <bsmall>
	278
	279	#
	280	# configurable vfs related resources
	281	# CONFIG_VNODES - used to pre allocate vnode related resources
	282	# CONFIG_VNODE_FREE_MIN - mininmum number of free vnodes
	283	# CONFIG_NC_HASH - name cache hash table allocation
	284	# CONFIG_VFS_NAMES - name strings
	285	#
	286	# 263168 magic number for medium CONFIG_VNODES is based on memory
	287	# Number vnodes is (memsize/64k) + 1024
	288	# This is the calculation that is used by launchd in tiger
	289	# we are clipping the max based on 16G
	290	# ie ((16102410241024)/(64 1024)) + 1024 = 263168;
	291
	292	options CONFIG_VNODES=263168 # <large,xlarge>
	293	options CONFIG_VNODES=263168 # <medium>
	294	options CONFIG_VNODES=10240 # <small>
	295	options CONFIG_VNODES=1024 # <xsmall>
b0d623f7	296	options CONFIG_VNODES=750 # <bsmall>
2d21ac55 A	297
	298	options CONFIG_VNODE_FREE_MIN=500 # <large,xlarge>
	299	options CONFIG_VNODE_FREE_MIN=300 # <medium>
	300	options CONFIG_VNODE_FREE_MIN=200 # <small>
	301	options CONFIG_VNODE_FREE_MIN=100 # <xsmall>
	302	options CONFIG_VNODE_FREE_MIN=75 # <bsmall>
	303
	304	options CONFIG_NC_HASH=5120 # <large,xlarge>
	305	options CONFIG_NC_HASH=4096 # <medium>
	306	options CONFIG_NC_HASH=2048 # <small,xsmall>
	307	options CONFIG_NC_HASH=1024 # <bsmall>
	308
	309	options CONFIG_VFS_NAMES=5120 # <large,xlarge>
	310	options CONFIG_VFS_NAMES=4096 # <medium>
	311	options CONFIG_VFS_NAMES=3072 # <small,xsmall>
	312	options CONFIG_VFS_NAMES=2048 # <bsmall>
	313
b7266188 A	314	options CONFIG_MAX_CLUSTERS=8 # <xlarge,large,medium>
	315	options CONFIG_MAX_CLUSTERS=4 # <small,xsmall,bsmall>
	316
2d21ac55 A	317	#
	318	# configurable kauth credential related resources
	319	#
	320	options KAUTH_CRED_PRIMES_COUNT=7 # <medium,large,xlarge>
	321	options KAUTH_CRED_PRIMES_COUNT=3 # <bsmall,xsmall,small>
	322
	323	options KAUTH_CRED_PRIMES="{97, 241, 397, 743, 1499, 3989, 7499}" # <medium,large,xlarge>
	324	options KAUTH_CRED_PRIMES="{5, 17, 97}" # <bsmall,xsmall,small>
	325
	326	#
	327	# configurable options for minumum number of buffers for kernel memory
	328	#
	329	options CONFIG_MIN_NBUF=256 # <medium,large,xlarge>
	330	options CONFIG_MIN_NBUF=128 # <small>
	331	options CONFIG_MIN_NBUF=80 # <xsmall>
	332	options CONFIG_MIN_NBUF=64 # <bsmall>
	333
	334	options CONFIG_MIN_NIOBUF=128 # <medium,large,xlarge>
	335	options CONFIG_MIN_NIOBUF=64 # <xsmall,small>
	336	options CONFIG_MIN_NIOBUF=32 # <bsmall>
	337
	338	#
	339	# set maximum space used for packet buffers
	340	#
	341	options CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)" # <large,xlarge>
	342	options CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)" # <medium>
	343	options CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)" # <bsmall,xsmall,small>
	344
b0d623f7	345	#
593a1d5f A	346	# set maximum space used for packet buffers
593a1d5f A	347	#
b0d623f7 A	348	options CONFIG_USESOCKTHRESHOLD=1 # <large,xlarge,medium>
b0d623f7 A	349	options CONFIG_USESOCKTHRESHOLD=0 # <bsmall,xsmall,small>
593a1d5f	350
2d21ac55 A	351	#
	352	# Configure size of TCP hash table
	353	#
	354	options CONFIG_TCBHASHSIZE=4096 # <medium,large,xlarge>
	355	options CONFIG_TCBHASHSIZE=128 # <xsmall,small,bsmall>
	356
	357	#
	358	# configurable async IO options
	359	# CONFIG_AIO_MAX - system wide limit of async IO requests.
	360	# CONFIG_AIO_PROCESS_MAX - process limit of async IO requests.
	361	# CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created.
	362	#
	363	options CONFIG_AIO_MAX=360 # <xlarge>
	364	options CONFIG_AIO_MAX=180 # <large>
	365	options CONFIG_AIO_MAX=90 # <medium>
	366	options CONFIG_AIO_MAX=45 # <small>
	367	options CONFIG_AIO_MAX=20 # <xsmall>
	368	options CONFIG_AIO_MAX=10 # <bsmall>
	369
	370	options CONFIG_AIO_PROCESS_MAX=64 # <xlarge>
	371	options CONFIG_AIO_PROCESS_MAX=32 # <large>
	372	options CONFIG_AIO_PROCESS_MAX=16 # <medium>
	373	options CONFIG_AIO_PROCESS_MAX=12 # <small>
	374	options CONFIG_AIO_PROCESS_MAX=8 # <xsmall>
	375	options CONFIG_AIO_PROCESS_MAX=4 # <bsmall>
	376
	377	options CONFIG_AIO_THREAD_COUNT=16 # <xlarge>
	378	options CONFIG_AIO_THREAD_COUNT=8 # <large>
	379	options CONFIG_AIO_THREAD_COUNT=4 # <medium>
	380	options CONFIG_AIO_THREAD_COUNT=3 # <small>
	381	options CONFIG_AIO_THREAD_COUNT=2 # <xsmall,bsmall>
	382
	383	#
	384	# configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in
	385	# sync with osfmk/conf/MASTER until we fix the config system...) todo XXX
	386	#
	387	options CONFIG_THREAD_MAX=2560 # <medium,large,xlarge>
	388	options CONFIG_THREAD_MAX=1536 # <small,xsmall>
	389	options CONFIG_THREAD_MAX=1024 # <bsmall>
	390
	391	options CONFIG_MAXVIFS=32 # <medium,large,xlarge>
	392	options CONFIG_MAXVIFS=16 # <small,xsmall>
	393	options CONFIG_MAXVIFS=2 # <bsmall>
	394
	395	options CONFIG_MFCTBLSIZ=256 # <medium,large,xlarge>
	396	options CONFIG_MFCTBLSIZ=128 # <small,xsmall>
	397	options CONFIG_MFCTBLSIZ=16 # <bsmall>
	398
	399	#
	400	# configurable kernel - use these options to strip strings from panic
	401	# and printf calls.
	402	# no_panic_str - saves around 50K of kernel footprint.
	403	# no_printf_str - saves around 45K of kernel footprint.
	404	#
	405	options CONFIG_NO_PANIC_STRINGS # <no_panic_str>
	406	options CONFIG_NO_PRINTF_STRINGS # <no_printf_str>
	407	options CONFIG_NO_KPRINTF_STRINGS # <no_kprintf_str>
	408
	409	#
	410	# configurable kernel - general switch to say we are building for an
	411	# embedded device
	412	#
	413	options CONFIG_EMBEDDED # <config_embedded>
	414
b0d623f7 A	415	# only execute signed code. Hang this off config_embedded since there's
	416	# nothing more appropriate right now
	417	#
	418	options CONFIG_ENFORCE_SIGNED_CODE # <config_embedded>
	419
b7266188 A	420	# support dynamic signing of code
	421	#
	422	options CONFIG_DYNAMIC_CODE_SIGNING # <dynamic_codesigning>
	423
593a1d5f A	424	#
	425	# code decryption... used on embedded for app protection
	426	# must be set in all the bsd/conf and osfmk/conf MASTER files
	427	#
	428	options CONFIG_CODE_DECRYPTION # <config_embedded>
	429
d1ecb069 A	430	#
	431	# User Content Protection, used on embedded
	432	#
	433
	434	options CONFIG_PROTECT # <config_protect>
	435
593a1d5f	436
1c79356b A	437	#
	438	# Ethernet (ARP)
	439	#
2d21ac55	440	pseudo-device ether # <networking,inet,inet6,netat>
1c79356b A	441	#
	442	# Network loopback device
	443	#
2d21ac55	444	pseudo-device loop # <networking,inet,inet6,netat>
1c79356b A	445	#
	446	# UCB pseudo terminal service
	447	#
2d21ac55 A	448	pseudo-device pty 512 init pty_init # <xlarge>
	449	pseudo-device pty 256 init pty_init # <large>
	450	pseudo-device pty 128 init pty_init # <medium>
	451	pseudo-device pty 48 init pty_init # <small>
	452	pseudo-device pty 16 init pty_init # <xsmall>
	453	pseudo-device pty 8 init pty_init # <bsmall>
	454	#
	455	# Cloning pseudo terminal service
	456	#
	457	pseudo-device ptmx 1 init ptmx_init
9bccf70c A	458
	459	#
	460	# vnode device
2d21ac55 A	461	#
	462	pseudo-device vndevice 16 init vndevice_init # <xlarge>
	463	pseudo-device vndevice 8 init vndevice_init # <large>
	464	pseudo-device vndevice 4 init vndevice_init # <medium>
	465	pseudo-device vndevice 3 init vndevice_init # <small>
	466	pseudo-device vndevice 2 init vndevice_init # <bsmall>
9bccf70c	467
55e303ae A	468	#
	469	# memory device
	470	pseudo-device mdevdevice 1 init mdevinit
	471
9bccf70c	472	#
1c79356b A	473	#
	474	# packet filter device
	475	#
2d21ac55	476	pseudo-device bpfilter 4 init bpf_init # <networking,inet,inet6,netat>
1c79356b	477
91447636 A	478	#
91447636 A	479	# fsevents device
2d21ac55	480	pseudo-device fsevents 1 init fsevents_init # <config_fse>
91447636	481
1c79356b A	482	#
	483	# shim to "linux" mach disk drivers (mach drivers must also be turned on)
	484	#
	485	# now using iokit disk shim, this is code is obsolete
	486	#pseudo-device diskshim
0b4e3aa0 A	487
0b4e3aa0 A	488	pseudo-device random 1 init random_init
2d21ac55 A	489	pseudo-device dtrace 1 init dtrace_init # <config_dtrace>
	490	pseudo-device helper 1 init helper_init # <config_dtrace>
	491	pseudo-device lockstat 1 init lockstat_init # <config_dtrace>
	492	pseudo-device sdt 1 init sdt_init # <config_dtrace>
	493	pseudo-device systrace 1 init systrace_init # <config_dtrace>
	494	pseudo-device fbt 1 init fbt_init # <config_dtrace>
	495	pseudo-device profile_prvd 1 init profile_init # <config_dtrace>
0b4e3aa0	496