diff --git a/configs/common/dumb_ap b/configs/common/dumb_ap
index 76aeac7..dde747e 100644
--- a/configs/common/dumb_ap
+++ b/configs/common/dumb_ap
@@ -108,7 +108,7 @@ CONFIG_PACKAGE_libelf=y
 CONFIG_PACKAGE_libbpf=y
 
 # Debugging
-CONFIG_PACKAGE_kmod-veth=y
+# CONFIG_PACKAGE_kmod-veth is not set
 
 CONFIG_ALL_KMODS=y
 CONFIG_ALL_NONSHARED=y
diff --git a/configs/common/openssl b/configs/common/openssl
index 449e375..5fdf39a 100644
--- a/configs/common/openssl
+++ b/configs/common/openssl
@@ -5,8 +5,16 @@ CONFIG_PACKAGE_libustream-openssl=y
 # CONFIG_PACKAGE_wpad-mbedtls is not set
 # CONFIG_PACKAGE_wpad-basic-mbedtls is not set
 # CONFIG_PACKAGE_wpad-basic-openssl is not set
-# CONFIG_LIBCURL_MBEDTLS is not set
-CONFIG_LIBCURL_OPENSSL=y
 CONFIG_LUA_ECO_OPENSSL=y
 # CONFIG_LUA_ECO_MBEDTLS is not set
+# CONFIG_LIBCURL_MBEDTLS is not set
+CONFIG_LIBCURL_OPENSSL=y
+
+# Enable http3 and quic
+CONFIG_LIBCURL_NGHTTP3=y
+# CONFIG_LIBCURL_NGTCP2 is not set
+
+# enable /dev/crypto
+CONFIG_PACKAGE_libopenssl-devcrypto=y
+CONFIG_PACKAGE_kmod-cryptodev=y
 #### replace mbedtls with openssl - remember to leave commented "is not set" or remove it!
diff --git a/configs/mediatek/mt7988a/bpi-r4 b/configs/mediatek/mt7988a/bpi-r4
index f1425fa..8db8fe2 100644
--- a/configs/mediatek/mt7988a/bpi-r4
+++ b/configs/mediatek/mt7988a/bpi-r4
@@ -18,7 +18,7 @@ CONFIG_PACKAGE_block-mount=y
 CONFIG_PACKAGE_blockd=m
 CONFIG_PACKAGE_mtdev=m
 CONFIG_PACKAGE_kmod-mtd-rw=y
-CONFIG_PACKAGE_kmod-veth=y
+# CONFIG_PACKAGE_kmod-veth is not set
 
 # temporary workaround for kernel 6.6
 # CONFIG_PACKAGE_kmod-usb-serial-dmx_usb_module is not set