Post #3226788

SLAAC with ISP-provided prefix. Everything that wants an IPv6 address gets one and I've got my firewall set to block pretty much all in-bound traffic other than SSH. It's nice being able to SSH directly to something rather than using a jump host or VPN. I also use ULA because NFS mounts over IPv6 on the global addresses would hang/timeout every time the SLAAC address rotated which is frequent due to privacy extensions.