On Jul 2, 2016 12:28 PM, "Baptiste Jonglez" <baptiste@bitsofnetworks.org>
wrote:
> However, you have to manually select needed kernel symbols in `make
> kernel_menuconfig`, which is very annoying.  If you want to give it a try,
> look for these symbols:
>
>     +CONFIG_IP6_NF_IPTABLES=m
>     +CONFIG_IPV6=y
>     +CONFIG_NETFILTER=y
>     +CONFIG_NETFILTER_ADVANCED=y
>     +CONFIG_NETFILTER_XTABLES=m
>     +CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=m
>     +CONFIG_NET_FOU=m
>     +CONFIG_NET_IP_TUNNEL=m
>     +CONFIG_NET_UDP_TUNNEL=m

On SMP systems, wireguard will benefit from CONFIG_PADATA which is
selectable by the parallel crypto engine option in the crypto API menu of
menuconfig.