Limitations: explain why nss-crypto/cfi is not worth carrying Its only real consumer is NSS IPsec (ESP) offload, IPsec/TLS/DTLS are unsupported on IPQ807x in the vendor matrix, the engine can't offload WireGuard (ChaCha20), and the A53 already has ARMv8 AES/SHA — so inline CPU crypto beats the offload round-trip for light/router-local crypto.

JuliusBairaktaris committed Jun 21, 2026

Document offload verification, SQM boot-race fix, multicast/bridge offload roadmap - Development-and-Testing: add a reusable 'verifying offload is actually working' method (delta-under-load, fw-vs-host byte ratio, exception stats as by-design, and ruling out a competing native flow engine). - SQM-and-Shaping: expand the sqm-scripts gotcha with the PPPoE check_addr boot race and the wait-for-address + retry-until-nsstbl fix; note that the WAN queue section must carry real rates. - Limitations-and-Roadmap: add routed-multicast offload as a candidate (ECM_MULTICAST_ENABLE, for high-rate routed multicast such as IPTV), an offload-coverage comparison against the vendor NSS support matrix, and the one-shot skb_try_coalesce WARN from the NSS RX/GRO path.

JuliusBairaktaris committed Jun 21, 2026

Correct AX3600 SoC to IPQ8071A (was IPQ8074); use IPQ807x for family references; name the Wi-Fi radios (QCN5024/QCN5054)

JuliusBairaktaris committed Jun 18, 2026

Development-and-Testing: drop luci-app-nss feed/config references

JuliusBairaktaris committed Jun 13, 2026

Home: drop luci-app-nss repo row

JuliusBairaktaris committed Jun 13, 2026

Note the nss-packages feed ships with the builder; add luci-app-nss

JuliusBairaktaris committed Jun 13, 2026

Document the ath11k NSS Wi-Fi offload: probe gate, two-phase bring-up, wifili results, patch-set audit

JuliusBairaktaris committed Jun 10, 2026

Add project wiki: architecture, firmware, operation, SQM, hardware, development, limitations

JuliusBairaktaris committed Jun 10, 2026