Tristan 9 said on Discord:
Yep. Would be great if we could use IPv6, unfortunately every ISP out there decided to lease completely fucking random prefix sizes to their customers, so if we did we'd have to base our defenses around /48 which would cause the same exact issue.
If you're involved in the networking world, please be the voice of sites like us which aren't hiding behind CF but don't have unlimited network/compute capacity to eat any attack people throw at us like the tech giants can
Until then, we'll keep pretending CGNAT isn't a thing and look past IPv6, because that's the only way to safely shower the regular DDoS attacks we receive