I'm still trying to figure out how to use Docker with an unstable prefix (hey Docker, this is as much your problem as the ISPs, honestly) as any of the v6NAT solutions I've found that enable the same full containerization available on IPv4 all require you feed the Docker daemon a fixed prefix on startup. Frustrating.

I'm also tired of reading posts about v6NAT being irrelevant because half of the point of containers is the interchangeability, Docker containers aren't supposed to be routable unless you intentionally put them on the host network! Docker just needs to work the same on v4 and v6!

Tor as a hole puncher is an intriguing idea but I don't think I would use it for something customer facing... Too many moving parts. We like to use Wireguard and a tiny cloud VPS instance when someone needs to punch into an unreliable network around here.