My ISP recently enabled ipv6 and I thought to myself this would be a good opportunity to roll out ipv6 on my LAN.
Unfortunately, I only get a dynamic prefix so I never know the addresses / the subnet of my devices. This makes life difficult for me, I need to configure proxy ACLs and other stuff using this information.
I am unable to use the link-local subnet because I can't make DNS entries for these. Using ULAs does not seem to be a good idea as per Jeremy Visser and from various documents on v6, seems to be frowned upon because it is "ipv4-like thinking".
How to handle this situation? Would it be feasible to assign a ULA prefix in addition to the ISP-assigned prefix? Or is there some other solution I am not aware of?
My ISP-mandated router is a "Fritz! Box 6320 v2 Cable", and I can hardly change any of the settings there, it's all overridden by ISP-provided settings (TR069 probably). Eventually I would like to stick a Linux box with iptables between my LAN and the Fritz! Box that could act as a DHCPv6 or something.
To clarify, I don't intend to offer any services to the outside world. This is about the LAN only.