29
[Question] what exactly is hard about adopting IPv6??
(programming.dev)
Community for discussing enterprise networks and the ensuing chaos that comes after inheriting or building one.
No. It's not random. SLAAC uses EUI-64 by default, it generate fixed /64 suffix from MAC. And with suffix match of nftables you can still do device specific income firewall rules. For random privacy address, it's only used for outcome so just block all other income of IPv6 addresses except EUI-64 is enough.