Skip to content

nss-switch: add new nss-switch tool#29517

Open
alexandrglm wants to merge 1 commit into
openwrt:masterfrom
alexandrglm:nss-switch
Open

nss-switch: add new nss-switch tool#29517
alexandrglm wants to merge 1 commit into
openwrt:masterfrom
alexandrglm:nss-switch

Conversation

@alexandrglm
Copy link
Copy Markdown

@alexandrglm alexandrglm commented May 22, 2026

net/nss-switch PR

📦 Package Details (New package)

Maintainer: Me (Alexander Gomez alexandrglm@proton.me)

Description:
This PR is intended to introduce nss-switch availability in openWRT sources; the tool allows users to selectively bypass Hardware Acceleration (on Qualcomm qualcommax platforms) or Software Offloading (SFE) on any platform, in a visual&intuitive way right from the shell.

It works via packet marking, in collaboration with conntrack, enabling full, non-shadowed, deep packet inspection for specific-desired traffic without losing global offloading benefits.

Source info & README can be found here.


🧪 Run Testing Details

  • OpenWrt Version: Main, OpenWrt 25.12.2
  • OpenWrt Target/Subtarget: qualcommax / ipq807x
  • OpenWrt Device: Xiaomi AX3600

✅ Formalities

  • I have reviewed the CONTRIBUTING.md file for detailed contributing guidelines.

If your PR contains a patch:

  • It can be applied using git am
  • It has been refreshed to avoid offsets, fuzzes, etc., using
    make package/<your-package>/refresh V=s
  • It is structured in a way that it is potentially upstreamable
    (e.g., subject line, commit description, etc.)
    We must try to upstream patches to reduce maintenance burden.

Amends

  • f0c0864: Fixed error in Makefile (prerm PATH), added SPDX header, and applied minor clean-up to the nss-ct-dump C component (tabs, empty lines).
  • c09c2c0: Fix Makefile (tabs) and removed core dependencies.

@alexandrglm alexandrglm changed the title net/nss-switch: add new nss-switch tool nss-switch: add new nss-switch tool May 22, 2026
A tool designed to manage Hardware Offload for qualcommax
platorms to permit a real non-shadowed packet inspection.
While optimised for NSS-enabled hardware, it remains compatible
with any other platform using Software Offloading (SFE).

Signed-off-by: Alexander Gomez <alexandrglm@proton.me>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant