I think you missed some part then...
There are many NSS firmware and they need to be synced with the QSDK used. (the driver part)
So yes the vendor-provided firmware support NSS cores but use an ancient NSS firmware and it doesn't make sense to use that as we have more recent version that accomplish the same task but better code and feature.
Obviously I did. This is a long thread. Thanks for replying.
hello
which firmware is the best these days for r7800 to be able to achieve 1gbit on wan? thanks!
Hi, found your post with example of using nsshtb, you are created 3 separate classid with different speed limits. How you filter between them?
Usually it was like this
tc filter add dev eth0 parent 1:0 protocol ip prio 50 u32 match ip dst 192.168.10.2 flowid 1:2
but in this case I've got
RTNETLINK answers: Not supported
We have an error talking to the kernel
What am I doing wrong?
Hi everyone.
Could anybody please explain, how to add NSS support to my custom firmware which was obtained by building from sources according to the official instructions?
Router Linksys EA8500, source code from https://git.openwrt.org, v21.02.1.
Is it possible to add NSS support to code from the official repo?
I have a community build if you want to try it out. Should give you full line speed.
Thanks, but I am building firmware with some changes and with a lot of integrated software. Only in that way software fits into the router memory. rtorrent, rutorrent and all corresponding dependencies (python, PHP etc), stubby, wireguard, some luci applications and so on.
If you clone my git repository (instructions are in post #2 of the community build thread) - you then have everything you need to make your own firmware (you have 21.02 + the basics to make NSS work). You can add any software packages you want on top. 
Hi folks,
I managed to get the NSS firmware to accelerate multicast traffic using the QCA Muticast Snooping (qca-mcs) module.
So far it seems stable with IGMPv2. I've only tested with IGMPv2 as my ISP uses v2 for the IPTV service. It should work with v3 as well. Have not tested MLD tho.
To get it to work, the qca-mcs kernel module has to be loaded, and I had to patch igmpproxy to configure qca-mcs via netlink.
From my test, without NSS acceleration, multicast traffic will consume about 5-10% of CPU for sirq. Once NSS takes over, sirq load goes down to near zero.
If you are interested in also testing out multicast acceleration using NSS for your ipq806x router, let me know. I'll be pushing the igmpproxy patches up to my Github repo soon.
Hi folks,
I have also pushed macvlan interface NSS acceleration support for qca-nss-ecm into my GitHub repo. The patch can be found here.
If you're using NSS acceleration for your ipq806x router and used macvlan, it will not be accelerated by the NSS firmware without this patch.
i have no idea about what a macvlan is, but it's amazing to see you still developing stuff on NSS 
Thanks a lot, as far as i can remember all started from you, and now we have more than decent NSS firmwares working
And yes, i'm still hoping to see you managing crypto engines
macvlan is another type of virtual interface that can be configured in Linux. I used it in my ipq806x router and noticed that it is not accelerated, and by chance noticed that support for macvlan was only added to later QSDK version in early 2021. So I 'back-ported' it to my repo.
My next interest is probably on 6rd acceleration, as my ISP uses that for IPv6.
For crypto, will probably have to wait for the OpenVPN DCO kernel module to be completed before we can attempt to use the crypto engine in the ipq806x SoC.
Would be cool to have all this in a somewhat newer release in the future.
From what I understand it will never be pushed to OpenWRT official releases?
can anyone advice here? thx
Well, the build from @ACwifidude is quite nice.
It's based on the work talked about in this thread.
Here's the link to @ACwifidude's build
@ACwifidude there is apparently a bug, vanila or your build? my 5g radio is disabled ... see full dmesg log
http://paste.debian.net/1229698/
apparently something with ath drivers...
....
[19382.093612] ath10k_pci 0001:01:00.0: wmi: fixing invalid VHT TX rate code 0xff
[168813.440524] device wlan0 left promiscuous mode
[168813.440696] br-lan: port 3(wlan0) entered disabled state
[168813.484709] ath10k_pci 0000:01:00.0: mac flush null vif, drop 0 queues 0xffff
[168813.486047] wlan0: Destroyed NSS virtual interface
[168813.486466] ath10k_pci 0000:01:00.0: mac-vif-chan had error in htt_rx_h_vdev_channel, peer-id: 0 vdev-id: 0 peer-addr: 8c:3b:ad:ba:b5:60.
[168813.495615] ath10k_pci 0000:01:00.0: No VIF found for vdev 0
[168813.508140] ------------[ cut here ]------------
[168813.514097] WARNING: CPU: 0 PID: 0 at target-arm_cortex-a15+neon-vfpv4_musl_eabi/linux-ipq806x_generic/ath10k-ct-regular/ath10k-ct-2021-09-22-e6a7d5b5/ath10k-5.10/htt_rx.c:1096 ath10k_htt_rx_pktlog_completion_handler+0x54c/0x1790 [ath10k_core]
[168813.518701] Modules linked in: ecm ath10k_pci ath10k_core ath wireguard mac80211 libchacha20poly1305 libblake2s ipt_REJECT curve25519_neon cfg80211 xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_recent xt_quota xt_pkttype xt_physdev xt_owner xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_addrtype xt_TCPMSS xt_REDIRECT xt_MASQUERADE xt_LOG xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CT xt_CLASSIFY sch_cake ppp_async poly1305_arm nf_reject_ipv4 nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_conntrack_netlink nf_conncount libcurve25519_generic libblake2s_generic iptable_raw iptable_nat iptable_mangle iptable_filter ipt_ECN ip_tables exfat crc_ccitt compat chacha_neon fuse sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_tcindex cls_route cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred act_gact qca_nss_qdisc qca_nss_pppoe pppoe pppox ppp_generic slhc ledtrig_usbport cryptodev
[168813.518799] xt_set ip_set_list_set ip_set_hash_netportnet ip_set_hash_netport ip_set_hash_netnet ip_set_hash_netiface ip_set_hash_net ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink ip6table_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip6t_NPT nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 nfsv4 nfsv3 nfs msdos bonding ifb ip6_udp_tunnel udp_tunnel sit qca_nss_drv qca_nss_gmac tunnel4 ip_tunnel tun xfrm_user xfrm_ipcomp af_key xfrm_algo vfat fat lockd sunrpc grace hfsplus hfs dns_resolver dm_mirror dm_region_hash dm_log dm_crypt nls_utf8 nls_iso8859_15 nls_iso8859_1 nls_cp850 nls_cp437 nls_cp1250 wp512 twofish_generic twofish_common tgr192 tea serpent_generic khazad cast6_generic cast5_generic cast_common camellia_generic blowfish_generic blowfish_common anubis xts crypto_user
[168813.605533] algif_skcipher algif_rng algif_hash algif_aead af_alg sha1_generic md5 kpp gf128mul echainiv ecb des_generic libdes cbc authenc dm_mod dax uas usb_storage leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_qcom ohci_platform ohci_hcd phy_qcom_ipq806x_usb ahci fsl_mph_dr_of ehci_platform ehci_fsl sd_mod ahci_platform libahci_platform libahci libata scsi_mod ehci_hcd gpio_button_hotplug f2fs ext4 mbcache jbd2 crc32c_generic crc32_generic
[168813.732000] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.4.171 #0
[168813.754182] Hardware name: Generic DT based system
[168813.760355] [<c030f974>] (unwind_backtrace) from [<c030b968>] (show_stack+0x14/0x20)
[168813.765044] [<c030b968>] (show_stack) from [<c0908dd8>] (dump_stack+0x94/0xa8)
[168813.773031] [<c0908dd8>] (dump_stack) from [<c031e944>] (__warn+0xb4/0xd0)
[168813.780143] [<c031e944>] (__warn) from [<c031e9b0>] (warn_slowpath_fmt+0x50/0x90)
[168813.787110] [<c031e9b0>] (warn_slowpath_fmt) from [<bfa02f84>] (ath10k_htt_rx_pktlog_completion_handler+0x54c/0x1790 [ath10k_core])
[168813.794845] [<bfa02f84>] (ath10k_htt_rx_pktlog_completion_handler [ath10k_core]) from [<bfa031a8>] (ath10k_htt_rx_pktlog_completion_handler+0x770/0x1790 [ath10k_core])
[168813.806846] [<bfa031a8>] (ath10k_htt_rx_pktlog_completion_handler [ath10k_core]) from [<bfa07a20>] (ath10k_htt_rx_proc_rx_frag_ind_hl+0xc08/0x1050 [ath10k_core])
[168813.821861] [<bfa07a20>] (ath10k_htt_rx_proc_rx_frag_ind_hl [ath10k_core]) from [<bfa085ec>] (ath10k_htt_txrx_compl_task+0x784/0x1144 [ath10k_core])
[168813.836168] [<bfa085ec>] (ath10k_htt_txrx_compl_task [ath10k_core]) from [<bfa65948>] (ath10k_pci_napi_poll+0x60/0x14c [ath10k_pci])
[168813.849621] [<bfa65948>] (ath10k_pci_napi_poll [ath10k_pci]) from [<c0795d34>] (__napi_poll+0x34/0x168)
[168813.861569] [<c0795d34>] (__napi_poll) from [<c0796088>] (net_rx_action+0xd8/0x21c)
[168813.871116] [<c0796088>] (net_rx_action) from [<c0302298>] (__do_softirq+0x130/0x2d4)
[168813.878842] [<c0302298>] (__do_softirq) from [<c0322d30>] (irq_exit+0xbc/0xe0)
[168813.886568] [<c0322d30>] (irq_exit) from [<c036fba0>] (__handle_domain_irq+0x6c/0xd0)
[168813.893780] [<c036fba0>] (__handle_domain_irq) from [<c05e053c>] (gic_handle_irq+0x5c/0xb8)
[168813.901759] [<c05e053c>] (gic_handle_irq) from [<c0301a8c>] (__irq_svc+0x6c/0x90)
[168813.910348] Exception stack(0xc0c01ee0 to 0xc0c01f28)
[168813.917734] 1ee0: 00000000 00009988 1ce4e000 dd98fa80 dcc13000 00000000 dd98ee30 00009988
[168813.922859] 1f00: 00009988 00000000 f3e46360 f3de59c0 00000015 c0c01f30 c0735460 c0735464
[168813.931098] 1f20: 80000013 ffffffff
[168813.939348] [<c0301a8c>] (__irq_svc) from [<c0735464>] (cpuidle_enter_state+0x94/0x498)
[168813.943080] [<c0735464>] (cpuidle_enter_state) from [<c07358ac>] (cpuidle_enter+0x30/0x4c)
[168813.951151] [<c07358ac>] (cpuidle_enter) from [<c034ae34>] (do_idle+0x1d8/0x240)
[168813.959222] [<c034ae34>] (do_idle) from [<c034b144>] (cpu_startup_entry+0x1c/0x20)
[168813.966867] [<c034b144>] (cpu_startup_entry) from [<c0b00e5c>] (start_kernel+0x4dc/0x4ec)
[168813.974387] ---[ end trace 96b0b29aad2b71ff ]---
[168813.982709] ath10k_pci 0000:01:00.0: No VIF found for vdev 0
[168813.987449] ath10k_pci 0000:01:00.0: No VIF found for vdev 0
....
any idea?
I restarted wifi 5ghz via luci> and it works.
[237051.200176] device wlan0 left promiscuous mode
[237051.200286] br-lan: port 3(wlan0) entered disabled state
[237051.250738] wlan0: Destroyed NSS virtual interface
[237051.250971] ath10k_pci 0000:01:00.0: peer-unmap-event: unknown peer id 0
[237057.727068] ath10k_pci 0000:01:00.0: 10.4 wmi init: vdevs: 16 peers: 48 tid: 96
[237057.727096] ath10k_pci 0000:01:00.0: msdu-desc: 2500 skid: 32
[237057.809052] ath10k_pci 0000:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186 msdu-desc: 2500 sw-crypt: 0 ct-sta: 0'
[237057.809876] ath10k_pci 0000:01:00.0: wmi print 'free: 84920 iram: 13156 sram: 11224'
[237058.193616] ath10k_pci 0000:01:00.0: rts threshold -1
[237058.193925] ath10k_pci 0000:01:00.0: Firmware lacks feature flag indicating a retry limit of > 2 is OK, requested limit: 4
[237058.197908] debugfs: File 'virt_if' in directory 'stats' already present!
[237058.209207] wlan0: Created a NSS virtual interface
[237058.219449] br-lan: port 3(wlan0) entered blocking state
[237058.220470] br-lan: port 3(wlan0) entered disabled state
[237058.226147] device wlan0 entered promiscuous mode
root@OpenWrt-wifi-AP:~#
but in such a case/ scenario i could say its unstable device... ;/
any idea here on the previous post? thx
After the restart any further issues?
after restart it works - for now.