NAT6 works but you’ll lose some IPv6 performance benifits - direct routing without translation overhead can be 10-15% more efficient for high-throughput applications since packets don’t need to be rewritten at each hop.
Comment on IPv6 & Opnsense & Not Exposing Machine-Specific IPv6s to Corpos
bw42@lemmy.world 4 weeks ago
Normal setup for IPv6 is to use public IPs everywhere, and use the firewall to block traffic to your internal systems.
desantolo.com/…/ipv6-lan-network-address-translat…
This article has instructions for configuring NAT6 outbound in OPNSense. It makes the IPv6 work similar to IPv4. Local DHCP routed through single external IPv6 address.
MysteriousSophon21@lemmy.world 3 weeks ago
glizzyguzzler@piefed.blahaj.zone 4 weeks ago
Thank you for the guide! It’s very straightforward and looks hella easy to implement. From reading it I would not have guessed it would do what I wished