Quick follow up to the last one.
I’m renting a /48 because I’m going to have connection failover at home at some point in the future, so why not borrow a /64 from that for the case?
I plugged the test server into my T-Mobile 5G Home Internet the other night, spun an OPNsense VM up, set NAT66 up, added the /64 to the WireGuard endpoint, and like clockwork is came up without issue.
I think I’m going to up the RAM on the Fitlet3 to 16GB and run OPNsense after all.
I need to spin that VM back up and run a speedtest to verify LAN throughput.