diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_IP6_NF_MATCH_SRH b/anolis/configs/L1-RECOMMEND/default/CONFIG_IP6_NF_MATCH_SRH
index 5f5f25c4d9c25e72a30501be20d8b6d3b69d8683..c90ba3ec7727395bc136e4c4e4cd699aeb8a11fd 100644
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_IP6_NF_MATCH_SRH
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_IP6_NF_MATCH_SRH
@@ -1 +1 @@
-# CONFIG_IP6_NF_MATCH_SRH is not set
+CONFIG_IP6_NF_MATCH_SRH=m
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_ILA b/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_ILA
deleted file mode 100644
index c9fa4cf9d9a7b596e0268eefad7dd10af5ab9ae7..0000000000000000000000000000000000000000
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_ILA
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_IPV6_ILA is not set
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_SEG6_BPF b/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_SEG6_BPF
new file mode 100644
index 0000000000000000000000000000000000000000..e1a32a8fd555a5af5250df5603c3e8f070622d1e
--- /dev/null
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_SEG6_BPF
@@ -0,0 +1 @@
+CONFIG_IPV6_SEG6_BPF=y
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_SEG6_HMAC b/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_SEG6_HMAC
index b98fbf937d1dab8eba2438a95202ed395abfc8c0..29e14feae995ca44ff7901a6936bda11f54aea27 100644
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_SEG6_HMAC
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_SEG6_HMAC
@@ -1 +1 @@
-# CONFIG_IPV6_SEG6_HMAC is not set
+CONFIG_IPV6_SEG6_HMAC=y
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_SEG6_LWTUNNEL b/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_SEG6_LWTUNNEL
index cedc498cb1b8a7f3f9a7f8554c2a1342bc9f5b92..75a3285a6926ce994508126035ee587ca5113dd3 100644
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_SEG6_LWTUNNEL
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_IPV6_SEG6_LWTUNNEL
@@ -1 +1 @@
-# CONFIG_IPV6_SEG6_LWTUNNEL is not set
+CONFIG_IPV6_SEG6_LWTUNNEL=y
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NETFILTER_XTABLES_COMPAT b/anolis/configs/L1-RECOMMEND/default/CONFIG_NETFILTER_XTABLES_COMPAT
new file mode 100644
index 0000000000000000000000000000000000000000..597de5d1383aaf28f373356c659ebc644f09c4d7
--- /dev/null
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_NETFILTER_XTABLES_COMPAT
@@ -0,0 +1 @@
+CONFIG_NETFILTER_XTABLES_COMPAT=y
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NETFILTER_XTABLES_LEGACY b/anolis/configs/L1-RECOMMEND/default/CONFIG_NETFILTER_XTABLES_LEGACY
new file mode 100644
index 0000000000000000000000000000000000000000..d4c76b5654041c5bd10d71993503482bb955ed70
--- /dev/null
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_NETFILTER_XTABLES_LEGACY
@@ -0,0 +1 @@
+CONFIG_NETFILTER_XTABLES_LEGACY=y
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_CONNMARK b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_CONNMARK
index eb651d1910aa3158d2dfb9cee4805c26e85e35a2..2bd23ac62c43a517254486074168ec6a724eb0eb 100644
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_CONNMARK
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_CONNMARK
@@ -1 +1 @@
-# CONFIG_NET_ACT_CONNMARK is not set
+CONFIG_NET_ACT_CONNMARK=m
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_CTINFO b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_CTINFO
deleted file mode 100644
index 0becc0cc7fe4ed1197acb7cedbe6ae2341d88160..0000000000000000000000000000000000000000
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_CTINFO
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NET_ACT_CTINFO is not set
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_GATE b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_GATE
deleted file mode 100644
index 39e73e5da996921a1d4e14088511461758409d5d..0000000000000000000000000000000000000000
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_GATE
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NET_ACT_GATE is not set
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_MPLS b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_MPLS
deleted file mode 100644
index 2f486dbf828f5fdcdad13c611666d287d57e376c..0000000000000000000000000000000000000000
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_ACT_MPLS
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NET_ACT_MPLS is not set
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_EMATCH_IPT b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_EMATCH_IPT
deleted file mode 100644
index 194717561a6666fcfee3188fbee71e7196b3f388..0000000000000000000000000000000000000000
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_EMATCH_IPT
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NET_EMATCH_IPT is not set
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_CAKE b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_CAKE
index 1413c498e3a7342b95198c56561811a6504b3927..17d6b6f7dfcf224ccfeff38ad06e3a63f21511d0 100644
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_CAKE
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_CAKE
@@ -1 +1 @@
-# CONFIG_NET_SCH_CAKE is not set
+CONFIG_NET_SCH_CAKE=m
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_CBS b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_CBS
index 96a7f28e56d293809a7ef3e57c22173b64d50aca..8d0583974d5ce9c23d8ba4dedb58e11f5ddc0e97 100644
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_CBS
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_CBS
@@ -1 +1 @@
-# CONFIG_NET_SCH_CBS is not set
+CONFIG_NET_SCH_CBS=m
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_ETF b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_ETF
index 81be382999ac7b43dc9251fe6c66eb43a7164a0d..e6e0db7048bc7d82503c75fffcf49ad32a612ab5 100644
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_ETF
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_ETF
@@ -1 +1 @@
-# CONFIG_NET_SCH_ETF is not set
+CONFIG_NET_SCH_ETF=m
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_ETS b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_ETS
deleted file mode 100644
index 95ea61e437bee556f65658a9e6626b8838b123a9..0000000000000000000000000000000000000000
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_ETS
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NET_SCH_ETS is not set
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_FQ_PIE b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_FQ_PIE
deleted file mode 100644
index 71241b274a8c3f760da59c1ad607f424de73ee0b..0000000000000000000000000000000000000000
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_FQ_PIE
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NET_SCH_FQ_PIE is not set
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_SKBPRIO b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_SKBPRIO
deleted file mode 100644
index 9805c0149c6aa4db4c67c52d0a6c11f3a20edd71..0000000000000000000000000000000000000000
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_SKBPRIO
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NET_SCH_SKBPRIO is not set
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_TAPRIO b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_TAPRIO
index fd5e3d773e09c1cf0bc0aee792113a6e0ef9f088..35da1ee607426643803bcc44e80f0646b4ec37ae 100644
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_TAPRIO
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_NET_SCH_TAPRIO
@@ -1 +1 @@
-# CONFIG_NET_SCH_TAPRIO is not set
+CONFIG_NET_SCH_TAPRIO=m
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NFT_BRIDGE_META b/anolis/configs/L1-RECOMMEND/default/CONFIG_NFT_BRIDGE_META
deleted file mode 100644
index 3e5759b849e4d67e423384fcb55459cd4284e415..0000000000000000000000000000000000000000
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NFT_BRIDGE_META
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NFT_BRIDGE_META is not set
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NFT_SYNPROXY b/anolis/configs/L1-RECOMMEND/default/CONFIG_NFT_SYNPROXY
index a8e9cdca8e5fb4f6275a299d446f4a4d5fde7d27..c0fa9ecc0ea5c5d1ac9b0ffdf1d65901e6295ac9 100644
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NFT_SYNPROXY
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_NFT_SYNPROXY
@@ -1 +1 @@
-# CONFIG_NFT_SYNPROXY is not set
+CONFIG_NFT_SYNPROXY=m
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_NF_CONNTRACK_BRIDGE b/anolis/configs/L1-RECOMMEND/default/CONFIG_NF_CONNTRACK_BRIDGE
index 1a7916a68faf120e0c924b88ed10851ff7b539ea..fe308004324abc6fb04ddb3bef8db44bda93d641 100644
--- a/anolis/configs/L1-RECOMMEND/default/CONFIG_NF_CONNTRACK_BRIDGE
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_NF_CONNTRACK_BRIDGE
@@ -1 +1 @@
-# CONFIG_NF_CONNTRACK_BRIDGE is not set
+CONFIG_NF_CONNTRACK_BRIDGE=m
diff --git a/anolis/configs/L1-RECOMMEND/default/CONFIG_TCP_AO b/anolis/configs/L1-RECOMMEND/default/CONFIG_TCP_AO
new file mode 100644
index 0000000000000000000000000000000000000000..2409e2e221ee0b978b7593426a96fb047ed579cd
--- /dev/null
+++ b/anolis/configs/L1-RECOMMEND/default/CONFIG_TCP_AO
@@ -0,0 +1 @@
+CONFIG_TCP_AO=y
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NETFILTER_XTABLES_COMPAT b/anolis/configs/L1-RECOMMEND/loongarch/CONFIG_NETFILTER_XTABLES_COMPAT
similarity index 100%
rename from anolis/configs/L2-OPTIONAL/default/CONFIG_NETFILTER_XTABLES_COMPAT
rename to anolis/configs/L1-RECOMMEND/loongarch/CONFIG_NETFILTER_XTABLES_COMPAT
diff --git a/anolis/configs/L1-RECOMMEND/x86/CONFIG_XFRM_USER_COMPAT b/anolis/configs/L1-RECOMMEND/x86/CONFIG_XFRM_USER_COMPAT
index 798d10e8e93e0c05bb284ed69c4e0f0be8ff7706..d5d702c14b14e5285c8f13a7e634ff7aa7d520ef 100644
--- a/anolis/configs/L1-RECOMMEND/x86/CONFIG_XFRM_USER_COMPAT
+++ b/anolis/configs/L1-RECOMMEND/x86/CONFIG_XFRM_USER_COMPAT
@@ -1 +1 @@
-# CONFIG_XFRM_USER_COMPAT is not set
+CONFIG_XFRM_USER_COMPAT=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC b/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC
index b703c0366e67ecb83dd9ab2ba9b97a45cbb6dcfb..38801771c5f15bbb614540057e66e4b6aaef53e3 100644
--- a/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC
@@ -1 +1 @@
-# CONFIG_AF_RXRPC is not set
+CONFIG_AF_RXRPC=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC_DEBUG b/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC_DEBUG
new file mode 100644
index 0000000000000000000000000000000000000000..4a39c0757b473ff61868197ed346fe453d2d2232
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC_DEBUG
@@ -0,0 +1 @@
+# CONFIG_AF_RXRPC_DEBUG is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC_INJECT_LOSS b/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC_INJECT_LOSS
new file mode 100644
index 0000000000000000000000000000000000000000..5fd291dc129327cfc281bf66ac0f89e3f5d5a673
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC_INJECT_LOSS
@@ -0,0 +1 @@
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC_INJECT_RX_DELAY b/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC_INJECT_RX_DELAY
new file mode 100644
index 0000000000000000000000000000000000000000..4ed1ec26c50be6b60422dd662dbf8b40f6fb545d
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC_INJECT_RX_DELAY
@@ -0,0 +1 @@
+# CONFIG_AF_RXRPC_INJECT_RX_DELAY is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC_IPV6 b/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC_IPV6
new file mode 100644
index 0000000000000000000000000000000000000000..06844d667a9d821db1b69dff522de55378a600ef
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_AF_RXRPC_IPV6
@@ -0,0 +1 @@
+# CONFIG_AF_RXRPC_IPV6 is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_BRIDGE_NF_EBTABLES_LEGACY b/anolis/configs/L2-OPTIONAL/default/CONFIG_BRIDGE_NF_EBTABLES_LEGACY
new file mode 100644
index 0000000000000000000000000000000000000000..edc9d05f383fc9ecaba93a54662162e576363457
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_BRIDGE_NF_EBTABLES_LEGACY
@@ -0,0 +1 @@
+# CONFIG_BRIDGE_NF_EBTABLES_LEGACY is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_DEFAULT_FQ_PIE b/anolis/configs/L2-OPTIONAL/default/CONFIG_DEFAULT_FQ_PIE
new file mode 100644
index 0000000000000000000000000000000000000000..3d6eb8bece8433b4277f9cfec508e469ddb31577
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_DEFAULT_FQ_PIE
@@ -0,0 +1 @@
+# CONFIG_DEFAULT_FQ_PIE is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_FILTER b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_FILTER
new file mode 100644
index 0000000000000000000000000000000000000000..40c33ab1f627d97215ff4793c5231d40d50ed8fa
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_FILTER
@@ -0,0 +1 @@
+CONFIG_IP6_NF_FILTER=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_IPTABLES_LEGACY b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_IPTABLES_LEGACY
new file mode 100644
index 0000000000000000000000000000000000000000..32cf93f37c19df9fe0fefd52e251c7b1bfca2b70
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_IPTABLES_LEGACY
@@ -0,0 +1 @@
+CONFIG_IP6_NF_IPTABLES_LEGACY=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_MANGLE b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_MANGLE
new file mode 100644
index 0000000000000000000000000000000000000000..20221d52326eccc2545a38a5c06d00fe4397054e
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_MANGLE
@@ -0,0 +1 @@
+CONFIG_IP6_NF_MANGLE=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_NAT b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_NAT
new file mode 100644
index 0000000000000000000000000000000000000000..76142289a8957f939dbfafd6e110a30a330f0c0b
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_NAT
@@ -0,0 +1 @@
+# CONFIG_IP6_NF_NAT is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_RAW b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_RAW
new file mode 100644
index 0000000000000000000000000000000000000000..db252dd0f40de703fc6fa95094792a8b6f47a787
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_RAW
@@ -0,0 +1 @@
+# CONFIG_IP6_NF_RAW is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_SECURITY b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_SECURITY
new file mode 100644
index 0000000000000000000000000000000000000000..e36c70f61566cda3c24f74146383e6c0710d8a9e
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_SECURITY
@@ -0,0 +1 @@
+# CONFIG_IP6_NF_SECURITY is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_TARGET_HL b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_TARGET_HL
new file mode 100644
index 0000000000000000000000000000000000000000..d094bc611c561027407cbca09fea1b8b8e64f291
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP6_NF_TARGET_HL
@@ -0,0 +1 @@
+# CONFIG_IP6_NF_TARGET_HL is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_FOU b/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_FOU
new file mode 100644
index 0000000000000000000000000000000000000000..8e8883e83293de05e94a7fa8f584adfd4d546662
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_FOU
@@ -0,0 +1 @@
+CONFIG_IPV6_FOU=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_FOU_TUNNEL b/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_FOU_TUNNEL
new file mode 100644
index 0000000000000000000000000000000000000000..b09927e58861a3c82e3868fe901cb11d04cf7a4c
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_FOU_TUNNEL
@@ -0,0 +1 @@
+CONFIG_IPV6_FOU_TUNNEL=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_ILA b/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_ILA
new file mode 100644
index 0000000000000000000000000000000000000000..7078045db67105ccc12e146f415ce71def3e4d50
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_ILA
@@ -0,0 +1 @@
+CONFIG_IPV6_ILA=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_IOAM6_LWTUNNEL b/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_IOAM6_LWTUNNEL
index c1839dbecffd9e8f47c75a6dfc2e24889102c42e..b92ab928be4ad1e1436d8936f7df08ca84cab09f 100644
--- a/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_IOAM6_LWTUNNEL
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IPV6_IOAM6_LWTUNNEL
@@ -1 +1 @@
-# CONFIG_IPV6_IOAM6_LWTUNNEL is not set
+CONFIG_IPV6_IOAM6_LWTUNNEL=y
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_ARPFILTER b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_ARPFILTER
new file mode 100644
index 0000000000000000000000000000000000000000..097e8615193e9a31f3725eebf388974612eac8c7
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_ARPFILTER
@@ -0,0 +1 @@
+# CONFIG_IP_NF_ARPFILTER is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_ARPTABLES b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_ARPTABLES
new file mode 100644
index 0000000000000000000000000000000000000000..c59d592cf1cd58b532e7ada2a67b9a9ce2dcdd7f
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_ARPTABLES
@@ -0,0 +1 @@
+# CONFIG_IP_NF_ARPTABLES is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_FILTER b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_FILTER
new file mode 100644
index 0000000000000000000000000000000000000000..24e5d7ee297a52b0e3dcf15683d6ca4518b204c5
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_FILTER
@@ -0,0 +1 @@
+CONFIG_IP_NF_FILTER=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_IPTABLES_LEGACY b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_IPTABLES_LEGACY
new file mode 100644
index 0000000000000000000000000000000000000000..d11cdcf4c91de26251886369bb001013eac1107e
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_IPTABLES_LEGACY
@@ -0,0 +1 @@
+CONFIG_IP_NF_IPTABLES_LEGACY=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_MANGLE b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_MANGLE
new file mode 100644
index 0000000000000000000000000000000000000000..f0082088892a8b3821af8f866a96f4d0f72ef1ce
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_MANGLE
@@ -0,0 +1 @@
+CONFIG_IP_NF_MANGLE=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_NAT b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_NAT
new file mode 100644
index 0000000000000000000000000000000000000000..4366eebbcb39aae8919f068c39ba2c15d49de70f
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_NAT
@@ -0,0 +1 @@
+# CONFIG_IP_NF_NAT is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_RAW b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_RAW
new file mode 100644
index 0000000000000000000000000000000000000000..9ca08e112061d80c62bcf87aac2c3daec975a5e2
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_RAW
@@ -0,0 +1 @@
+# CONFIG_IP_NF_RAW is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_SECURITY b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_SECURITY
new file mode 100644
index 0000000000000000000000000000000000000000..4b966515893b7b5ffdc7e39856af7901f62f1601
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_SECURITY
@@ -0,0 +1 @@
+# CONFIG_IP_NF_SECURITY is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_TARGET_TTL b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_TARGET_TTL
new file mode 100644
index 0000000000000000000000000000000000000000..ead87ebd3713939268ab4cb7569e793909e0f7e7
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_NF_TARGET_TTL
@@ -0,0 +1 @@
+# CONFIG_IP_NF_TARGET_TTL is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_VS_TWOS b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_VS_TWOS
index fa92cefd835ea244ab28bad4043bcb6449c7b39e..348c2720e194974d76f2042704a45cdd1d99aaaa 100644
--- a/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_VS_TWOS
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_IP_VS_TWOS
@@ -1 +1 @@
-# CONFIG_IP_VS_TWOS is not set
+CONFIG_IP_VS_TWOS=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NETFILTER_NETLINK_HOOK b/anolis/configs/L2-OPTIONAL/default/CONFIG_NETFILTER_NETLINK_HOOK
index 9f6748bb605d63cd05648cf5b09159500d08a794..8521d32061854a0bf4f7abe967752cc5c9f86ab0 100644
--- a/anolis/configs/L2-OPTIONAL/default/CONFIG_NETFILTER_NETLINK_HOOK
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NETFILTER_NETLINK_HOOK
@@ -1 +1 @@
-# CONFIG_NETFILTER_NETLINK_HOOK is not set
+CONFIG_NETFILTER_NETLINK_HOOK=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NETFILTER_XTABLES_LEGACY b/anolis/configs/L2-OPTIONAL/default/CONFIG_NETFILTER_XTABLES_LEGACY
deleted file mode 100644
index 2c9898987231ea9e04e0896df17f0c98d29ccde4..0000000000000000000000000000000000000000
--- a/anolis/configs/L2-OPTIONAL/default/CONFIG_NETFILTER_XTABLES_LEGACY
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NETFILTER_XTABLES_LEGACY is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_ACT_CTINFO b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_ACT_CTINFO
new file mode 100644
index 0000000000000000000000000000000000000000..e17224c15cd799abeae1f0a56ab454173ab92074
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_ACT_CTINFO
@@ -0,0 +1 @@
+CONFIG_NET_ACT_CTINFO=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_ACT_GATE b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_ACT_GATE
new file mode 100644
index 0000000000000000000000000000000000000000..c0ae85b476b61d4df2fbf39b8a4e68b48ee8f52c
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_ACT_GATE
@@ -0,0 +1 @@
+CONFIG_NET_ACT_GATE=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_ACT_MPLS b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_ACT_MPLS
new file mode 100644
index 0000000000000000000000000000000000000000..18907e3e96908cfbebee73d9409a0abb20342ceb
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_ACT_MPLS
@@ -0,0 +1 @@
+CONFIG_NET_ACT_MPLS=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_EMATCH_IPT b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_EMATCH_IPT
new file mode 100644
index 0000000000000000000000000000000000000000..7e5e1ba07099d38b8b8d97259d2c94dd17ccbe80
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_EMATCH_IPT
@@ -0,0 +1 @@
+CONFIG_NET_EMATCH_IPT=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_FOU b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_FOU
index 12f5c083633ab9e8bf18025857557f4ad7360886..f78ee6d87882139fcf2581e9153170b25703c23f 100644
--- a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_FOU
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_FOU
@@ -1 +1 @@
-# CONFIG_NET_FOU is not set
+CONFIG_NET_FOU=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_FOU_IP_TUNNELS b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_FOU_IP_TUNNELS
index b2cb0a55c76377876165b46b0d5dd6fd278eace5..7d89b7659e6d98fee34c8a83b9984629a18e2b8c 100644
--- a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_FOU_IP_TUNNELS
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_FOU_IP_TUNNELS
@@ -1 +1 @@
-# CONFIG_NET_FOU_IP_TUNNELS is not set
+CONFIG_NET_FOU_IP_TUNNELS=y
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_DUALPI2 b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_DUALPI2
index 168f55052988f9187e2d984d6ffab87b58e78e14..26c27ffeab9e5e578006ddff4516fb7d96bc61f3 100644
--- a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_DUALPI2
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_DUALPI2
@@ -1 +1 @@
-# CONFIG_NET_SCH_DUALPI2 is not set
+CONFIG_NET_SCH_DUALPI2=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_ETS b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_ETS
new file mode 100644
index 0000000000000000000000000000000000000000..40ac4251ec49694621c42c1c6e1eb3b24a43d3d3
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_ETS
@@ -0,0 +1 @@
+CONFIG_NET_SCH_ETS=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_FQ_PIE b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_FQ_PIE
new file mode 100644
index 0000000000000000000000000000000000000000..9fa99e38829779750dcfdf9c5193f458b40212fd
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_FQ_PIE
@@ -0,0 +1 @@
+CONFIG_NET_SCH_FQ_PIE=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_SKBPRIO b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_SKBPRIO
new file mode 100644
index 0000000000000000000000000000000000000000..adf5929aff751081a2d22b60202d2397d4b4c0f1
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NET_SCH_SKBPRIO
@@ -0,0 +1 @@
+CONFIG_NET_SCH_SKBPRIO=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NFT_BRIDGE_META b/anolis/configs/L2-OPTIONAL/default/CONFIG_NFT_BRIDGE_META
new file mode 100644
index 0000000000000000000000000000000000000000..93dbf6fa7832451c71521e1f1a1d08f3533fb623
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NFT_BRIDGE_META
@@ -0,0 +1 @@
+CONFIG_NFT_BRIDGE_META=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_NFT_REJECT_NETDEV b/anolis/configs/L2-OPTIONAL/default/CONFIG_NFT_REJECT_NETDEV
index 2b94f900d859b01881b8ba7691770bca4ee38a93..e53989aed4ad42071d5641260b198fc66a698221 100644
--- a/anolis/configs/L2-OPTIONAL/default/CONFIG_NFT_REJECT_NETDEV
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_NFT_REJECT_NETDEV
@@ -1 +1 @@
-# CONFIG_NFT_REJECT_NETDEV is not set
+CONFIG_NFT_REJECT_NETDEV=m
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_RXGK b/anolis/configs/L2-OPTIONAL/default/CONFIG_RXGK
new file mode 100644
index 0000000000000000000000000000000000000000..96ea4a88f98d4da0095915f43f7eb47731b67766
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_RXGK
@@ -0,0 +1 @@
+# CONFIG_RXGK is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_RXKAD b/anolis/configs/L2-OPTIONAL/default/CONFIG_RXKAD
new file mode 100644
index 0000000000000000000000000000000000000000..ad47846c44a6a25e708eb3c8f2e41569d41355ef
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_RXKAD
@@ -0,0 +1 @@
+# CONFIG_RXKAD is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_RXPERF b/anolis/configs/L2-OPTIONAL/default/CONFIG_RXPERF
new file mode 100644
index 0000000000000000000000000000000000000000..d81b7597c4a0b7b1fcdfce96dac800ea0946fb3f
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_RXPERF
@@ -0,0 +1 @@
+# CONFIG_RXPERF is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_SLIP_MODE_SLIP6 b/anolis/configs/L2-OPTIONAL/default/CONFIG_SLIP_MODE_SLIP6
index 8ddc7389f0dfd8b23a09a4b6fe0b5db3f6135534..52ae4210818bfd77d42e83a25e3e26764b088bed 100644
--- a/anolis/configs/L2-OPTIONAL/default/CONFIG_SLIP_MODE_SLIP6
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_SLIP_MODE_SLIP6
@@ -1 +1 @@
-# CONFIG_SLIP_MODE_SLIP6 is not set
+CONFIG_SLIP_MODE_SLIP6=y
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_TCP_AO b/anolis/configs/L2-OPTIONAL/default/CONFIG_TCP_AO
deleted file mode 100644
index 55abef1da1571f52900738d2f93236ad66ea1e58..0000000000000000000000000000000000000000
--- a/anolis/configs/L2-OPTIONAL/default/CONFIG_TCP_AO
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_TCP_AO is not set
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_TCP_SIGPOOL b/anolis/configs/L2-OPTIONAL/default/CONFIG_TCP_SIGPOOL
new file mode 100644
index 0000000000000000000000000000000000000000..3fab40007463e7f41421abf9a7dfc3bb3746baee
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_TCP_SIGPOOL
@@ -0,0 +1 @@
+CONFIG_TCP_SIGPOOL=y
diff --git a/anolis/configs/L2-OPTIONAL/default/CONFIG_XFRM_IPTFS b/anolis/configs/L2-OPTIONAL/default/CONFIG_XFRM_IPTFS
index 3012ee6a4b04dfba40b10d725ad20d5201e18e21..a98eeba8b99fa90460f6b0dc453f4f3023177f52 100644
--- a/anolis/configs/L2-OPTIONAL/default/CONFIG_XFRM_IPTFS
+++ b/anolis/configs/L2-OPTIONAL/default/CONFIG_XFRM_IPTFS
@@ -1 +1 @@
-# CONFIG_XFRM_IPTFS is not set
+CONFIG_XFRM_IPTFS=m
diff --git a/anolis/configs/L2-OPTIONAL/loongarch/CONFIG_NETFILTER_XTABLES_COMPAT b/anolis/configs/L2-OPTIONAL/loongarch/CONFIG_NETFILTER_XTABLES_COMPAT
deleted file mode 100644
index 95501c0673138f83bf95db5c1ae3d43a09975e99..0000000000000000000000000000000000000000
--- a/anolis/configs/L2-OPTIONAL/loongarch/CONFIG_NETFILTER_XTABLES_COMPAT
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NETFILTER_XTABLES_COMPAT is not set
diff --git a/anolis/configs/L2-OPTIONAL/x86/CONFIG_WANT_COMPAT_NETLINK_MESSAGES b/anolis/configs/L2-OPTIONAL/x86/CONFIG_WANT_COMPAT_NETLINK_MESSAGES
new file mode 100644
index 0000000000000000000000000000000000000000..311a09f28c6459c1ca7cc0329d7eca44249290d6
--- /dev/null
+++ b/anolis/configs/L2-OPTIONAL/x86/CONFIG_WANT_COMPAT_NETLINK_MESSAGES
@@ -0,0 +1 @@
+CONFIG_WANT_COMPAT_NETLINK_MESSAGES=y