>Is the general model of public/private subnet still valid? Or are you saying in a ipv6-only world, there's no need for separate subnets? Define "public/privat

>Is the general model of public/private subnet still valid? Or are you saying in a ipv6-only world, there's no need for separate subnets? Define "public/private". Your server has an IPv6 address that is globally identifiable. Your gateway may not necessarily route traffic to it. >(in ipv4 world, you know that server is truly unreachable via public internet) You don't know that, because a port forward rule on the gateway would route traffic to it after doing NAT. And if you made the effort to know that your gateway doesn't have such a rule, then you can equally make the effort to know that your gateway doesn't have a rule to forward traffic to the server's subnet.