NSS-Switch v1.0.0-r1 (aarch64)

NSS-Switch v1.0.0

Compiled version for aarch64 architecture (ipq807x).

CHANGELOG

• Hybrid support: shell for UI, C for heavy-duty functions
  • Migrated conntrack.sh > ct_dump_all_full() to C (highly improved performance)

📌 See CHANGELOG.md for detailed history.

Installation on OpenWrt

Pre-requisites

• OpenWrt 25.12+ with NSS (QCA SSDK) enabled
• Full conntrack / nftables support

APK file

nss-switch-1.0.0-r1-aarch64-selfsigned.apk --allow-untrusted

RSA nss-switch.rsa.pubpublic key is included in the repository/releases so it can be added to /etc/apk/keys/ directly, making the --allow-untrusted flag unnecessary.

NSS-Switch v1.0.0-r1 (DEBUG)

⚠️ WORK IN PROGRESS
A selective CPU bypass manager for Qualcomm NSS (Network Subsystem) on OpenWrt.
This tool allows you to mark specific connections so they are processed by the CPU instead of the NSS hardware accelerator.
Useful (and needed) for:

• Traffic that needs deep inspection (e.g., tcpdump, bandwidthd, snort)
• Debugging or troubleshooting NSS offload issues
• Per-flow bypass rules without disabling NSS globally
  No service/network restart required to bypass (hot-swapping) any NSS connection.

📌 See CHANGELOG.md for detailed history and pending work.

Installation on OpenWrt

Pre-requisites

• OpenWrt 25.12+ with NSS (QCA SSDK) enabled
• Full conntrack / nftables support

APK file

apk add /path/to/nss-switch-1.0.0-r1_DEBUG.apk --allow-untrusted

RSA public key is included in the repository/releases so it can be added to /etc/apk/keys/ directly, making the --allow-untrusted flag unnecessary.