## Kernel dependencies

> **Tip**: If you are using one of the recommended distributions, you will already
> satisfy these. 
{: .alert .alert-success}

- `nf_conntrack_netlink` subsystem
- `ip_tables` (for IPv4)
- `ip6_tables` (for IPv6)
- `ip_set`
- `xt_set`
- `ipt_set`
- `ipt_rpfilter`
- `ipt_REJECT`
- `ipip` (if using {{site.prodname}} networking)