options QUOTA # # <quota>
options INET
+options ABSOLUTETIME_SCALAR_TYPE
options NEW_VM_CODE # # <newvm>
options OLD_VM_CODE # # <!newvm>
options HW_AST # Hardware ast support # <hw_ast>
options NORMA_TASK # NORMA task support # <norma_task>
options NORMA_ETHER # NORMA across ethernet # <norma_ether>
options SIMPLE_CLOCK # don't assume fixed tick # <simple_clock>
-options STAT_TIME # Use statistical timing # <!timing>
options XPR_DEBUG # kernel tracing # <xpr_debug>
options KDEBUG # kernel tracing # <kdebug>
options DDM_DEBUG # driverkit-style tracing # <ddm_debug>
options TPIP # # <tpip>
options TUN # # <tun>
options VLAN # # <vlan>
+options BOND # # <bond>
+options NETMIBS # # <netmibs>
options IPDIVERT # Divert sockets (for NAT) # <ipdivert>
options IPFIREWALL # IP Firewalling (used by NAT) # <ipfirewall>
#options IPFIREWALL_VERBOSE # # <ipfirewall>
options IPFIREWALL_FORWARD #Transparent proxy # <ipfirewall>
options IPFIREWALL_DEFAULT_TO_ACCEPT # allow everything by default # <ipfirewall>
-options IPFIREWALL_KEXT # Kernel extension # <ipfirewall>
+#options IPFIREWALL_KEXT # Kernel extension # <ipfirewall>
+options DUMMYNET # dummynet support # <dummynet>
+options IPFW2 # IP firewall (new version) # <ipfw2>
options MULTICAST # Internet Protocol Class-D $
+options TCPDEBUG # TCP debug # <tcpdebug>
+options RANDOM_IP_ID # random (not sequential) ip ids # <randomipid>
+options TCP_DROP_SYNFIN # Drop TCP packets with SYN+FIN set # <tcpdrop_synfin>
+options ICMP_BANDLIM # ICMP bandwidth limiting sysctl
+options AUDIT # Security event auditing # <audit>
#
# 4.4 general kernel
#
-options COMPAT_43 # 4.3 BSD compatibility # <compat_43>
+options COMPAT_43_TTY # 4.3 BSD tty compat # <compat_43_tty>
+options COMPAT_43_SOCKET # 4.3 BSD socket compat # <compat_43_socket>
options DIAGNOSTIC # diagnostics # <diagnostic>
options KTRACE # ktrace support # <ktrace>
+options GPROF # build profiling # <profile>
#
# 4.4 filesystems
#
options FFS # Fast Filesystem Support # <ffs>
options HFS # HFS/HFS+ support # <hfs>
-options HFS_HARDLINKS # HFS+ hardlink support # <hfs>
options FIFO # fifo support # <fifo>
-options PORTAL # portal_fs support # <portal>
options UNION # union_fs support # <union>
options FDESC # fdesc_fs support # <fdesc>
options CD9660 # ISO 9660 CD-ROM support # <cd9660>
# AppleTalk Support
#
options NETAT # AppleTalk support # <netat>
-options AURP_SUPPORT # AppleTalk Update Routing # <netat>
+#options AURP_SUPPORT # AppleTalk Update Routing # <netat>
#
# Machine Independent Apple Features
#
options KERNEL_STACK # MI kernel stack support # <kernstack>
profile # build a profiling kernel # <profile>
+#
+# Point-to-Point Protocol support
+#
+pseudo-device ppp 2 # <ppp>
+
#
-# IPv6 (Kame Stable 20000425) Support
+# IPv6 Support
#
options "INET6" # kernel IPv6 Support # <inet6>
-options MAPPED_ADDR_ENABLED # enable IPv4, on IPv6 socket # <inet6>
options IPSEC # IP security # <ipsec>
options IPSEC_ESP # IP security # <ipsec>
options "IPV6FIREWALL" # IPv6 Firewall Feature # <ipv6firewall>
-options "IPV6FIREWALL_DEFAULT_TO_ACCEPT" #IPv6 Firewall Feature # <ipv6firewall>
-options "IPV6FIREWALL_VERBOSE" #IPv6 Firewall Feature # <ipv6firewall>
-options NATPT # KAME/IPv6 NAT feature #<natpt>
-pseudo-device gif 2 # <gif>
+options "IPV6FIREWALL_DEFAULT_TO_ACCEPT" #IPv6 Firewall Feature # <ipv6firewall>
+#options "IPV6FIREWALL_VERBOSE" #IPv6 Firewall Feature # <ipv6firewall>
+
+pseudo-device gif 1 # <gif>
pseudo-device dummy 2 # <dummy>
pseudo-device faith 1 # <faith>
+pseudo-device stf 1 # <stf>
+
+options crypto # <ipsec,crypto>
makeoptions LIBDRIVER = "libDriver_kern.o" # <libdriver>
makeoptions LIBOBJC = "libkobjc.o" # <kernobjc>
#
# UCB pseudo terminal service
#
-pseudo-device pty 32 init pty_init
+pseudo-device pty 128 init pty_init
+
+#
+# vnode device
+pseudo-device vndevice 4 init vndevice_init
+
+#
+# memory device
+pseudo-device mdevdevice 1 init mdevinit
+
+#
#
# packet filter device
#
pseudo-device bpfilter 4 init bpf_init
+#
+# fsevents device
+pseudo-device fsevents 1 init fsevents_init
+
#
# shim to "linux" mach disk drivers (mach drivers must also be turned on)
#
# now using iokit disk shim, this is code is obsolete
#pseudo-device diskshim
+
+pseudo-device random 1 init random_init
+