Securely Deploying IPv6 in 2020 Part 1: Internet Facing Perimeter

This report provides practical guidance for securely deploying IPv6, covering foundational concepts (addressing and scopes), critical ICMPv6 behaviors, and detailed perimeter defenses including allocated-space and anti-spoofing filters, ICMPv6 policy, multicast controls, extension header normalization, BGP security hardening, and DMZ address allocation strategies. It emphasizes nuanced ICMPv6 handling to maintain network functionality, normalization to thwart evasion and DoS via extension headers, and operational policies for scalable, randomized address assignments to reduce reconnaissance success. The content is a defensive best-practices overview rather than an incident or threat report.