On Sun, Nov 28, 2021 at 3:52 PM Matt Palmer <mpal...@hezmatt.org> wrote: > Which is, fundamentally, half the problem with IPv6 in AWS. I'd have much > preferred that they'd added the ability to do actually-useful IPv6 routing > rather than IPv6-only subnets, which strikes me as more of a toy than > something *actually* useful.
Yeah, they don't even have a practical way to implement a firewall instance for IPv6. Unless you want to mirror 1:many NAT for IPv6 like you do IPv4. You just can't route an IPv6 block to an instance. And with 1:many NAT you wouldn't want public IP addresses inside but AWS doesn't let you assign ULA addresses inside the subnet, only global addresses. Regards, Bill Herrin -- William Herrin b...@herrin.us https://bill.herrin.us/
