[zeugma]

To that end, I am designing a firewall for a fanless computing appliance that builds on more than 20 years of success in IPv4, and also provides the same protection of IPv6. Different realms that have different methods. For IPv6, instead of trying to use NAT, it protects a subnet of the IPv6 address space assigned to the site. Inside computers can "call out" and get responses, but outside entities can't "call in".

Have you looked at DD-WRT?

[asinclair]

No. DD-WRT is targeted to access points, not general router solutions. Instead, I'm using this project as a learning tool for nftables(8), fed by Python. It starts specifically as a solution for an interface between a LAN and the Internet, and I expect it will grow from there.

Besides, I like doing this sort of thing.