CONFIG_IPV6=y

      - Essential IPv6 support

    CONFIG_IPV6_SIT=y

      - Enables use of IPv6-in-IPv4 tunnels - one day you may need this

    CONFIG_IPV6_NDISC_NODETYPE=y

      - Enables certain checks on neighbor discovery

    CONFIG_IPV6_TUNNEL=y

      - Supports RFC2473 IPv6-in-IPv6 and IPv4-in-IPv6 tunnels- one day you

        may need this

    CONFIG_IPV6_MULTIPLE_TABLES=y

    CONFIG_IPV6_SUBTREES=y

      - Together, the above two enable support for multiple IPv6 routingi tables

        (such as source-addressed based routing)

    CONFIG_INET6_AH=y

    CONFIG_INET6_ESP=y

    CONFIG_INET6_IPCOMP=y

    CONFIG_INET6_XFRM_TUNNEL=y

    CONFIG_INET6_TUNNEL=y

      - Above needed for IPsec with IPv6. You may not use this; the hint author

        does.

    CONFIG_NF_SOCKET_IPV6=m

    CONFIG_NF_TPROXY_IPV6=m

    CONFIG_NF_TABLES_IPV6=y

    CONFIG_NFT_REJECT_IPV6=m

    CONFIG_NFT_FIB_IPV6=m

    CONFIG_NF_REJECT_IPV6=y

    CONFIG_NF_LOG_IPV6=m

    CONFIG_IP6_NF_MATCH_IPV6HEADER=y

    CONFIG_NF_DEFRAG_IPV6=y

     - Netfilter support for various commonly-referenced elements of IPv6

       packet filtering. Many host-based firewall tools need these to be

       enabled.