Is it theoretically possible to implement NSS 'properly' (as a hardware flow-offloading variant, akin to what exists for Mediatek SOCs), yes. The kernel source is open and licensed accordingly, the licensing state of the NSS blobs is less clear, the firmware ABI not defined (~can change between versions without warning, not reeaaallllyyyyy documented), but this is not an immediate disqualification.
The NSS kernel code as-is however is a steaming pile of âŚsomething, QCA just did their thing without talking to netfilter folks - which is their right, but it doesn't help getting things merged. The patches are very invasive, hooking into and bypassing large parts of netfilter code (as well as some other projects), it doesn't stand a snowman's chance in hell to get merged. The existing code could only be used as (partial) reference documentation, someone would have to start from scratch again and rewrite this within the flow-offloading framework (very different semantics). Only trying this wil reveal if the existing NSS code matches flow-offloading semantics 'enough' to make this theoretically viable. QCA's NSS implementation is quite OCD, they've written it to go really overboard and offload a lot of different things, relying of patched variants of other things beyind 'just' the kernel (e.g. PPP, IPsec and more things can be offloaded) - which is cool for benchmarks, but doesn't make things easier for the poor soul who might want to re-implement this properly. The NSS firmware is a black box, any potential (security-) bugs cannot be fixed nor even audited, at best compromised offloading paths might be disabled (but given the full-offloading nature, this means almost no offloading for those cases).
NSS as a concept applies to:
- ipq806x
- ipq807x
- ipq50xx
- ipq60xx
But even among these SOCs, the major version of NSS differs, while the idea is the same, there are tangible difference between the SOCs (and the different versions released over time), there is no easy/ blanket compatibility between them.
ipq40xx does not use NSS.
Worse, the current wifi 7 SOCs (ipq957x and ipq53xx) do not use NSS anymore, so any development would be strictly for 'old' (which QCA doesn't care about anymore and won't help with adapted NSS firmwares, should the need arise) SOCs. It's not helpful for current/ future devices.
So even if you'd find a volunteer (unclear, given that NSS is a dead-end and not applicable to ipq53xx/ ipq957x), I'm pretty sure you wouldn't be able to afford it.
This is a full-time task for 2-3 seasoned developers and 3-5 years of work, finding out (documenting) what the current NSS firmware does, starting from scratch with a flow-offloading re-implementation - and then convincing the mainline/ netfilter developers to take it, given the extent of NSS, this alone will take many iterations reacting to their change requests (this alone will take at least half of the time).
tl;dr: it's not im-im-impossible, but chances for it to actually succeed are minimal - and given the efforts required, money will not help[*].
castles-in-the-air possible: yes
realistic: no.
--
[*] in the best case, you might be able to convince a university professor that this is the next best thing after sliced bread, so they make it their research topic, get grants, contribute their master students time as code monkeys. no, this is not going to happen.