For a SOHO user, it is very likely that the user doesn't have static public IPv6 prefixes. For users who get dynamic IPv6 prefixes through ISP's DHCPv6 prefix delegation, it is difficult to set up firewall rules (with source / destination address matches), prefix translation, or set up an DHCPv6 server to hand out addresses or sub-prefixes from delegated prefixes.
I would like to open a discussion for ideas about improving support for dynamic IPv6 prefixes. There could be some technical difficulties for some issues though.
One thing that could be a good start point is to patch wide-dhcpv6-client to invoke a custom script when a dynamic prefixes is received or released. OPNSense maintains a fork (https://github.com/opnsense/dhcp6c) with patches to do that, which I can help port those patches to VyOS. Then we will need some mechanism in VyOS to react to prefix changes.
Let me know if anyone has more ideas.
Similar feature requests:
- https://forum.vyos.io/t/ipv6-prefix-translation-with-dynamic-prefix-from-isp/619
- https://forum.vyos.io/t/dhcpv6-server-handing-out-addresses-from-delegated-prefix/6874