Commit Graph

10 Commits

Author SHA1 Message Date
AgustinLorenzo
bf12b39e94 qualcommax: Reimplement nf_conntrack_tcp_no_window_check 2023-08-31 13:03:51 +03:00
AgustinLorenzo
0f661084dd qualcommax: some fixes to bridge filtering config option 2023-08-31 13:03:51 +03:00
dimfish
eeeba480ee Disable bridge filtering 2023-08-31 13:03:50 +03:00
bitthief
e4447f3197 qca-nss-ecm: introduce helper to disable offloads
Experimental fix for SSL/TLS handshake failures and
packet fragmentation / MTU issues observed after
enabling the ECM module.
2023-05-20 04:01:47 +03:00
bitthief
07350c9f03 qca-nss-ecm: update to QSDK 12.3r2
Bump QCA NSS ECM to NHSS.QSDK.12.3.r2 tag.

Massive thanks to @AgustinLorenzo.

Reference:
8d73961018
2023-05-08 15:13:34 +03:00
bitthief
33548c7e31 qca-nss-ecm: init fix, bump nf_conntrack_max to 32768 2023-03-13 22:37:05 +02:00
bitthief
622f3130b5 qca-nss-ecm: introduce bridge filtering config option
Issues have been reported with NAT loopback and ECM,
caused by the ECM init script enabling bridge filtering
too early. Introduce a config option to enable bridge
filtering (on by default).
2023-02-24 02:46:44 +02:00
Ansuel Smith
2a9e76182d qca-nss-ecm: bump to QSDK 12.0.5
qca-nss-ecm: avoid a memcpy overflow in ecm_db

Reference:
https://github.com/robimarko/nss-packages/pull/10/files

qca-nss-ecm: fix nf_ct_net null pointer reference

Fixed by xsm1997, massive thanks!
It fixes a null pointer access which is introduced in previous qca-nss-ecm patches.

Reference:
https://github.com/bitthief/openwrt/issues/9
2023-02-11 05:21:49 +02:00
XiaoliChan
edf4a0edcb [qca-ecm init] Add if condition in start function
Without this, the "net.bridge.bridge" will append into /etc/sysctl.d/qca-nss-ecm.conf in every system reboot/startup.

Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2022-04-05 13:53:33 +02:00
Robert Marko
ff1f06d815 Add 11.4 NSS-ECM
Add NSS-ECM from QSDK11.4

NSS-ECM is the main package for NSS offloading.
It provides various hooks, classifiers and calls to
offload or not.

It includes patches to make it run on kernel 5.10.
Made for IPQ807x.

Signed-off-by: Robert Marko <robimarko@gmail.com>
2021-05-30 20:34:01 +02:00