4 ms·

It's the same as in IPv4. If the user has a static IP address, in IPv4 you ban a /32 (i.e., one address, his own). In IPv6 you'd have to ban the entire range a

It's the same as in IPv4. If the user has a static IP address, in IPv4 you ban a /32 (i.e., one address, his own). In IPv6 you'd have to ban the entire range allocated to the user, usually a /64. (edited) If the user has a dynamic IP address, well, you're on your own. :D

detaro 9y ago
A /32 in IPv6 often is an entire provider, so that's not a good idea. A /64 is the closest to a single IPv4 address, (although some providers give each customer a /56 or so, for creating subnets).
- Symbiote 9y ago
  With CG-NAT on IPv4, banning a v6 /64 is no worse than banning an v4 /32.