On 29/11/2021 02:23, William Herrin wrote: > This technique does in fact work for IPv6, allowing you to insert a > firewall at the edge. Interestingly though, it won't receive IPv6 > packets for an address that isn't attached to a running instance in > the interior subnet.
That sounds remarkably sensible given that the AWS customer base will be dipping their toes into the world of IPv6 very cautiously. (No good for a honeypot, but we have many other means for that.) -- Tom