updated my dynalink, set it up from zero , result? near 1 gig nat over ethernet, few% cpu load , but i'm have some weird problems with wifi , is slow and keeps disconnecting client, i set channel to 48 and bandwitch to 160MHz , wpa2 aes key and thats it . weird , need to take a look on this. but luci is fast as heck.
Thanks!
Does qhora can do nat with over 9 Gbps?
I am running the build on a AX3600 and it seems to be working well enough. Any chance this is going to be mainline soon?
imho doubt it highly ...reason is that I don't think the QCA/NSS code will ever be upstreamed to the linux kernel. Openwrt approach is to have code that is easily maintained and upstreamable ... another reason is finding someone that has the time to keep all of this code up to date and supportable ... my two cents here
@rmandrad I also want to use MACVLAN, have you made the offload work? My final target is:
static link aggregation of 4 1g ethernet ports + MACVLAN + mwan3.
yes emc_dump.sh shows macvlan ... you need to add to the ecm Makefile
ECM_INTERFACE_MACVLAN_ENABLE=y
the below are all the compile setttings I have on the Makefile
ECM_MAKE_OPTS:=ECM_IPV6_ENABLE=y
ECM_MAKE_OPTS+=ECM_FRONT_END_NSS_ENABLE=y \
ECM_MAKE_OPTS+=ECM_FRONT_END_NSS_ENABLE=y \
ECM_FRONT_END_SFE_ENABLE=n \
ECM_FRONT_END_SFE_ENABLE=n \
ECM_NON_PORTED_SUPPORT_ENABLE=y \
ECM_NON_PORTED_SUPPORT_ENABLE=y \
ECM_INTERFACE_BOND_ENABLE=y \
ECM_INTERFACE_VLAN_ENABLE=y \
ECM_INTERFACE_IPSEC_ENABLE=n \
ECM_CLASSIFIER_MARK_ENABLE=y \
ECM_INTERFACE_PPTP_ENABLE=n \
ECM_CLASSIFIER_DSCP_ENABLE=y \
ECM_INTERFACE_PPPOE_ENABLE=y \
ECM_CLASSIFIER_PCC_ENABLE=n \
ECM_INTERFACE_L2TPV2_ENABLE=n \
ECM_BAND_STEERING_ENABLE=n
ECM_INTERFACE_GRE_TAP_ENABLE=n \
ECM_INTERFACE_GRE_TUN_ENABLE=n \
ECM_INTERFACE_SIT_ENABLE=n \
ECM_INTERFACE_TUNIPIP6_ENABLE=n \
ECM_INTERFACE_RAWIP_ENABLE=y \
ECM_INTERFACE_VLAN_ENABLE=y \
ECM_INTERFACE_VXLAN_ENABLE=y \
ECM_INTERFACE_MACVLAN_ENABLE=y \
ECM_CLASSIFIER_MARK_ENABLE=y \
ECM_CLASSIFIER_DSCP_ENABLE=n \
ECM_CLASSIFIER_PCC_ENABLE=n \
ECM_CLASSIFIER_MSCS_ENABLE=y \
ECM_CLASSIFIER_NL_ENABLE=n \
ECM_BAND_STEERING_ENABLE=n \
ECM_OPENWRT_SUPPORT=y
1 Like
Hi boys,
Again, I am redo the repos over the latest commit from OpenWRT.
Changelog:
- Updated the kernel 5.15.113
- Updates to ath10k-ct (IoT antenna): https://github.com/openwrt/openwrt/commit/e537ebbc23184adbf9adc0d1fd936d365fd839f4
- Cleanup NSS code, Dynalink DL-WRX36 is now welcome in my build, @carpcat can you test and confirm this point?
- Experimental fix for SSL/TLS handshake failures and packet fragmentation / MTU issues observed after enabling the ECM module, by @bitthief commit: https://github.com/AgustinLorenzo/nss-packages/commit/3dd0c5f73178cad4d3fbfc45526f339f315ba139
Next Goal:
- Update to kernel 6.1, it's already released for ipq807x by @robimarko
- Rebased the code of NSS to kernel 6.1
- Update to the latest tag of NSS: NHSS.QSDK.12.4.r1
Sources:
BUILDED: https://github.com/AgustinLorenzo/openwrt/releases/tag/ipq807x-2023-05-29-2126
Regards, Agustin
8 Likes
Hi Agustin, Dynalink WRX-36 tested with your new build, and working well. Many thanks for fixing this. Much appreciated 
is it possible to build with with 6.1? I get error building nss package.
/build_dir/target-aarch64_cortex-a53_musl/linux-ipq807x_generic/qca-nss-dp-2023-01-23-21e2fe7b/nss_dp_main.c:640:17: error: implicit declaration of function 'random_ether_addr' [-Werror=implicit-function-declaration]
640 | random_ether_addr(netdev->dev_addr);
| ^~~~~~~~~~~~~~~~~
No problem so far with same config when i build with kernel 5.15.
6.1 support needs to be worked out ... the qca-nss-dp though should be supported as it is part of openwrt 6.1 support that has just been rolled out in the weekend
1 Like
Hi @asvio
Give me a couple of days, and I can get to work with the change to kernel 6.1 with NSS, we hope that Qualcoom, just as it updated the qca-ssdk driver to support 6.1, will do so with the rest of the modules (nss-dp , ecm, clients), but this will be a miracle
Regards, Agustin
1 Like
What do you mean? Qualcomm didn't update anything. They're still at 5.15 currently.
I found the patch for ssl bug
who else got same problem can test with net.netfilter.nf_conntrack_tcp_no_window_check
for activating
/etc/sysctl.d/qca-nss-ecm.conf
net.netfilter.nf_conntrack_tcp_no_window_check=1
This problem is still present.
Hi @olci
I think it is not related to this since this was removed in openwrt here: https://github.com/openwrt/openwrt/commit/75e78bcaab847557ce1782eb2dea9dff9a029171
Regards, Agustin
i know it is removed from openwrt but stock firmware and previusly qsdk builds were contain the patch
after the appling patch i got no more "tcp segment of a reassembled pdu"
ssl connections back to normal just like before
To me this looks like 5.4 and meanwhile there is also a 6.1 repo though robi updated ssdk, nss-dp etc. to 6.1.
Where did you find 4.x?
As a n00b, can I sysupgrade from the original Snapshot Openwrt without problem? (of course with resetting settings)