Update NSS config for AX3600

Config is based on [1].

[1] https://github.com/glassd00r/Openwrt_Builder/blob/main/ax3600.config

configs/common/nss

@@ -1,197 +1,29 @@
 # Include Qualcomm NSS
 
-# LuCI
-CONFIG_PACKAGE_cgi-io=y
-CONFIG_PACKAGE_liblucihttp=y
-CONFIG_PACKAGE_luci=y
-CONFIG_PACKAGE_luci-app-firewall=y
-CONFIG_PACKAGE_luci-app-opkg=y
-CONFIG_PACKAGE_luci-base=y
-CONFIG_PACKAGE_luci-lib-base=y
-CONFIG_PACKAGE_luci-lib-ip=y
-CONFIG_PACKAGE_luci-lib-jsonc=y
-CONFIG_PACKAGE_luci-lib-nixio=y
-CONFIG_PACKAGE_luci-mod-admin-full=y
-CONFIG_PACKAGE_luci-mod-network=y
-CONFIG_PACKAGE_luci-mod-status=y
-CONFIG_PACKAGE_luci-mod-system=y
-CONFIG_PACKAGE_luci-proto-ipv6=y
-CONFIG_PACKAGE_luci-proto-ppp=y
-CONFIG_PACKAGE_luci-theme-bootstrap=y
-
-# additional packages
-CONFIG_PACKAGE_vim=y
-CONFIG_PACKAGE_bmon=y
-CONFIG_PACKAGE_htop=y
-CONFIG_PACKAGE_iperf3=y
-CONFIG_PACKAGE_curl=y
-CONFIG_PACKAGE_rsync=y
-CONFIG_PACKAGE_tcpdump=y
-CONFIG_PACKAGE_bind-dig=y
-CONFIG_PACKAGE_ethtool-full=y
-CONFIG_PACKAGE_pciutils=y
-# CONFIG_PACKAGE_irqbalance=y
-# CONFIG_PACKAGE_luci-app-irqbalance=y
-CONFIG_PACKAGE_tc-full=y
-# CONFIG_PACKAGE_tc-tiny is not set
-
-# attendedsysupgrade
-# NOTE: There is no sense to add auc package due it uses different repo.
-# CONFIG_PACKAGE_owut is not set
-
-# use experimental kernel
-CONFIG_TESTING_KERNEL=y
-
-# wireguard
-CONFIG_PACKAGE_kmod-wireguard=y
-CONFIG_PACKAGE_wireguard-tools=y
-CONFIG_PACKAGE_luci-proto-wireguard=y
-CONFIG_PACKAGE_qrencode=y
-
-# https dns
-CONFIG_PACKAGE_https-dns-proxy=y
-CONFIG_PACKAGE_luci-app-https-dns-proxy=y
-CONFIG_PACKAGE_libnghttp3=y
-CONFIG_PACKAGE_libngtcp2=y
-
-# collecd
-CONFIG_PACKAGE_luci-app-statistics=y
-CONFIG_PACKAGE_collectd=y
-CONFIG_PACKAGE_collectd-mod-cpu=y
-CONFIG_PACKAGE_collectd-mod-interface=y
-CONFIG_PACKAGE_collectd-mod-iwinfo=y
-CONFIG_PACKAGE_collectd-mod-load=y
-CONFIG_PACKAGE_collectd-mod-memory=y
-CONFIG_PACKAGE_collectd-mod-network=y
-CONFIG_PACKAGE_collectd-mod-rrdtool=y
-CONFIG_PACKAGE_collectd-mod-sensors=y
-CONFIG_PACKAGE_collectd-mod-wireless=y
-CONFIG_PACKAGE_collectd-mod-dns=y
-
-# some other network stats
-CONFIG_PACKAGE_luci-app-vnstat2=y
-
-## Better roaming: dawn vs usteer => choose one
-### dawn
-#CONFIG_PACKAGE_dawn=y
-#CONFIG_PACKAGE_luci-app-dawn=y
-
-### usteer
-#CONFIG_PACKAGE_usteer=y
-#CONFIG_PACKAGE_luci-app-usteer=y
-
-# sqm
-CONFIG_PACKAGE_luci-app-sqm=y
-CONFIG_PACKAGE_sqm-scripts=y
-# CONFIG_PACKAGE_ip6tables-nft is not set
-
-# ddns
-CONFIG_PACKAGE_luci-app-ddns=y
-CONFIG_PACKAGE_ddns-scripts=y
-CONFIG_PACKAGE_bind-host=y
-
-# language
-CONFIG_LUCI_LANG_pl=y
-
-##### REPLACE CRYPTOLIB #####
-# mbedtls - comment it when openssl or wolfssl enabled!
-CONFIG_PACKAGE_wpad-mbedtls=y
-CONFIG_PACKAGE_wpad-basic-mbedtls=m
-
-## replace mbedtls with openssl - remember to leave commented "is not set" !
-#CONFIG_PACKAGE_wpad-openssl=y
-## CONFIG_PACKAGE_wpad-mbedtls is not set
-## CONFIG_PACKAGE_wpad-basic-mbedtls is not set
-## CONFIG_PACKAGE_wpad-basic-openssl is not set
-
-## replace mbedtls with wolfssl - remember to leave commented "is not set" !
-# CONFIG_PACKAGE_wpad-wolfssl=y
-## CONFIG_PACKAGE_wpad-mbedtls is not set
-## CONFIG_PACKAGE_wpad-basic-mbedtls is not set
-## CONFIG_PACKAGE_wpad-basic-openssl is not set
-
-## There were more differences, but it would be added after
-## executing: make menuconfig
-# CONFIG_ATH11K_MEM_PROFILE_1G is not set
-CONFIG_ATH11K_MEM_PROFILE_512M=y
-CONFIG_ATH11K_NSS_MESH_SUPPORT=y
+# Disable QCA9887 radio
+# CONFIG_PACKAGE_ath10k-firmware-qca9887-ct is not set
+# CONFIG_PACKAGE_kmod-ath10k-ct-smallbuffers is not set
+#
+# NSS Offloading
 CONFIG_ATH11K_NSS_SUPPORT=y
-CONFIG_LUCI_LANG_es=y
-CONFIG_NSS_DRV_BRIDGE_ENABLE=y
-CONFIG_NSS_DRV_CLMAP_ENABLE=y
-CONFIG_NSS_DRV_CRYPTO_ENABLE=y
-CONFIG_NSS_DRV_GRE_ENABLE=y
-CONFIG_NSS_DRV_IGS_ENABLE=y
-CONFIG_NSS_DRV_IPV6_ENABLE=y
-CONFIG_NSS_DRV_L2TP_ENABLE=y
-CONFIG_NSS_DRV_LAG_ENABLE=y
-CONFIG_NSS_DRV_MAPT_ENABLE=y
-CONFIG_NSS_DRV_MATCH_ENABLE=y
-CONFIG_NSS_DRV_PPPOE_ENABLE=y
-CONFIG_NSS_DRV_PPTP_ENABLE=y
-CONFIG_NSS_DRV_PVXLAN_ENABLE=y
-CONFIG_NSS_DRV_SHAPER_ENABLE=y
-CONFIG_NSS_DRV_TUN6RD_ENABLE=y
-CONFIG_NSS_DRV_TUNIPIP6_ENABLE=y
-CONFIG_NSS_DRV_VIRT_IF_ENABLE=y
-CONFIG_NSS_DRV_VLAN_ENABLE=y
-CONFIG_NSS_DRV_VXLAN_ENABLE=y
-CONFIG_NSS_DRV_WIFIOFFLOAD_ENABLE=y
-CONFIG_NSS_DRV_WIFI_EXT_VDEV_ENABLE=y
-CONFIG_NSS_DRV_WIFI_MESH_ENABLE=y
-CONFIG_NSS_FIRMWARE_VERSION_11_4=y
-# CONFIG_NSS_FIRMWARE_VERSION_12_1 is not set
-CONFIG_NSS_MEM_PROFILE_MEDIUM=y
-CONFIG_PACKAGE_6rd=y
 CONFIG_PACKAGE_MAC80211_NSS_SUPPORT=y
-CONFIG_PACKAGE_kmod-bonding=y
-CONFIG_PACKAGE_kmod-crypto-authenc=y
-CONFIG_PACKAGE_kmod-crypto-kpp=y
-CONFIG_PACKAGE_kmod-crypto-lib-chacha20=y
-CONFIG_PACKAGE_kmod-crypto-lib-chacha20poly1305=y
-CONFIG_PACKAGE_kmod-crypto-lib-curve25519=y
-CONFIG_PACKAGE_kmod-crypto-lib-poly1305=y
-CONFIG_PACKAGE_kmod-crypto-sha1=y
-CONFIG_PACKAGE_kmod-crypto-sha256=y
-CONFIG_PACKAGE_kmod-ipt-conntrack=y
-CONFIG_PACKAGE_kmod-ipt-conntrack-extra=y
-CONFIG_PACKAGE_kmod-ipt-nat=y
-CONFIG_PACKAGE_kmod-nf-conncount=y
-CONFIG_PACKAGE_kmod-nf-conntrack=y
-CONFIG_PACKAGE_kmod-tcp-bbr=y
-CONFIG_PACKAGE_kmod-tun=y
-CONFIG_PACKAGE_libopenssl-conf=y
-CONFIG_PACKAGE_libbpf=y
-CONFIG_PACKAGE_libnatpmp=y
-CONFIG_PACKAGE_kmod-tls=y
-CONFIG_PACKAGE_kmod-ifb=y
-CONFIG_PACKAGE_kmod-ip6-tunnel=y
-CONFIG_PACKAGE_kmod-qca-mcs=y
-CONFIG_PACKAGE_kmod-qca-nss-cfi-cryptoapi=y
-CONFIG_PACKAGE_kmod-qca-nss-crypto=y
+CONFIG_PACKAGE_nss-firmware-ipq8074=y
 CONFIG_PACKAGE_kmod-qca-nss-drv=y
+CONFIG_PACKAGE_kmod-qca-nss-ecm=y
+
+# Additional NSS packages (VLAN, Multicast Snooping)
 CONFIG_PACKAGE_kmod-qca-nss-drv-bridge-mgr=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-clmapmgr=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-eogremgr=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-gre=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-igs=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-l2tpv2=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-lag-mgr=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-map-t=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-match=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-pppoe=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-pptp=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-pvxlanmgr=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-qdisc=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-tun6rd=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-tunipip6=y
 CONFIG_PACKAGE_kmod-qca-nss-drv-vlan-mgr=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-vxlanmgr=y
-CONFIG_PACKAGE_kmod-qca-nss-drv-wifi-meshmgr=y
-CONFIG_PACKAGE_kmod-qca-nss-ecm=y
-CONFIG_PACKAGE_mesh11sd=y
-CONFIG_PACKAGE_mhz=y
-CONFIG_PACKAGE_nss-eip-firmware=y
-CONFIG_PACKAGE_nss-firmware-default=y
-CONFIG_PACKAGE_nss-firmware-ipq8074=y
-# CONFIG_PACKAGE_qca-ssdk-shell is not set
+CONFIG_PACKAGE_kmod-qca-mcs=y
+
+# Target dependant NSS config
+CONFIG_NSS_MEM_PROFILE_HIGH=y
+CONFIG_ATH11K_MEM_PROFILE_1G=y
+
+# Reduce kernel module size
+# CONFIG_ATH11K_DEBUGFS_HTT_STATS is not set
+# CONFIG_ATH11K_DEBUGFS_STA is not set
+# CONFIG_ATH11K_THERMAL is not set
+
+# CONFIG_FEED_nss is not set
+# CONFIG_FEED_sqm_scripts_nss is not set

configs/qualcommax/ax3600

@@ -3,6 +3,9 @@
 # later, eg.:
 # curl -SL https://raw.githubusercontent.com/danpawlik/openwrt-builder/master/configs/common/main-router >> .config
 #
+# Optional: to use nss build
+# curl -SL https://raw.githubusercontent.com/danpawlik/openwrt-builder/master/configs/common/nss >> .config
+#
 
 CONFIG_TARGET_qualcommax=y
 CONFIG_TARGET_qualcommax_ipq807x=y