pfSense = Firewall and router system based on FreeBSD. Has both open source and commercial versions. Built for SMB to Enterprise uses. Extremely powerful with all of the bells and whistles you’d expect from a professional firewall product.

OPNSense = Basically pfSense with a different UI. It’s a fork of pfSense. Much of the same capability, but is built by a smaller company.

OpenWRT = Replacement firmware for embedded devices (as well as x86). It’s open source WiFi router firmware that runs on tens of thousands of devices. Many vendors will even base their custom firmware on OpenWRT and put a different skin on it (GL.iNet, for example).

If they’re providing IPv6 to you, port forwarding shouldn’t be necessary most of the time for online gaming.

Are they allowing UPnP upstream?

If you’re getting a /64 from your ISP via DHCPv6, you likely need to send a prefix hint. I’d guess /60. Then you’ll have multiple /64s to work with on your inside interfaces.

Who is the ISP?

If you’re allocated DHCPv6-PD with a subnet, you don’t use a relay.

Prefix ID of 0x1 means “Use the first prefix available in the block as a /64 for the LAN”. Essentially your ISP probably gave you a /48, /56, or /60. The firewall is giving prefix IDs to all of the /64s you can fit inside of one of these and allocating them numbers 1 through whatever. Each LAN you have can have its own prefix ID. A /60 has 16 /64 networks that you can subnet it into.

If purchasing isn’t ownership, piracy isn’t stealing.

Host your own Wireguard endpoint on any cloud provider. They give you elastic IPs that you can create 1:1 NATs for your hosts. Maybe not quite as clean, but effectively the same thing.

The SATA controller on the motherboard. The thing you plug your SATA cable into.