Hacker News Reader

Would use OpenBSD + unbound to get NAT64 + DNS64. I'd prefer a dual-stack setup with RFC1918 IPv4 internally + a NAT44 gateway and IPv6 "just" on top. Drawback: if you find yourself to have to do a lot of firewalling it essentially doubles your work.

& for "at scale" - how about 100,000,000 users?

https://twitter.com/iPv4depletion/status/1584376525427978240

afaik jool is the currently-recommended foss nat64 (since tayga is apparently unmaintained)

alot of commercial vendors have mature nat64 implementations tho

Jool also has the best documentation I've ever seen. It does not only explain how to configure the software but it also has illustrated explanations that do a far better job than the actual RFCs in describing the motivation and use cases of the many protocols it supports.