The only long term solution is to ban ipv4 sales and tell anyone who wants new ip addresses to get ipv6.

IPv4 is a security risk now with all sorts of malicious traffic routed through cgnat proxies.