3 ms·
NAT also solves the dynamic address issue. With GUA I need to deal with both dynamic prefix and randomised suffix that can be changed by seemingly unrelated thi
by lunar_rover 6mo ago
NAT also solves the dynamic address issue. With GUA I need to deal with both dynamic prefix and randomised suffix that can be changed by seemingly unrelated things when opening ports to the internet.
- preisschild 6mo agoDoes your ISP not offer static prefixes? For 5€/mo additional I get a static /32 v4 (for NAT64) and a /60 v6 prefix.
- _bernd 6mo agoThat's why server use a static suffix and do slaac to get their prefix. It's really as simple as that. Regarding firewall policies: just because most network OS are plain dumb, does not implies that's the fault of IPv6. A zone based firewall solves that already. And for instance OpenWrt fw4 can make rules for suffixes in a zone too.