ladys and gentlemen,
https://git.lede-project.org/?p=lede/blogic/staging.git;a=shortlog;h=refs/heads/qca8k
i've rewritten the qca hwnat patches from scratch built upon rev-eng knowledge derived from ssdk. currently this only works on the ipq806x + qca8337N combo. i'd love to know of a router with 8327N inside so i can make qca8k + hw nat work on that too.
with the patches i am able to reach wirepseed. i am using iperf3 for testing with 256 byte frame size udp/tcp and 10 parallel streams
there seems to be an issue with udp once frame size goes above 1472 bytes, at which point the traffic hits the sw path. i've pinged my contacts at qca and asked them to hook me up with someone that can help figure out if this is a a hw or sw bug.
apart from that ipv4/6 routing, ipv4 nat and multicast offloading work fine. hw QoS support is also functional.
these patches will go upstream soonish, once pablo from the netfilter.org team has completed his flow table offloading patches. right now the my tree still relies on a more than ugly conntack hack, which is doomed to be replaced asap....