Install a mandatory VPN to your home, then at home setup a gateway to control everything.

Ensure you install a custom certificate from the gateway in the root certificate vault so you can do dpi even in the encrypted transmissions

Filtering is important but logging is even more important. Don’t forget that

Don’t know what to say,

I maintain a double stack since 5 years and apart of some small nuisance I never had a real problem.

Ipv6 has been with us for more than 20 years, and It is true that to have that fine grain control in ipv6 you will need to go to a prosumer devices, but those are not that expensive and if you have a home lab you should check on them anyway…

Things are mature despite your bad experiences

Well…

Ipv6 is needed for peer to peer networks, easier for vpn and full mndgoru if you want to have a vps…

With it, you can avoid Cgnats and home Nats and usually it is faster and more reliable than ipv4.

So, see it for yourself…

The amount of swap used is not a good indicative, you need to check if there is a big exchange of data per second/minute. This is the only indicative of an out of memory system.

Sometimes, some regions of data memory “age” in ram without any access for a long periods of time, the the kernel here has two options, it could destroy the region knowing it could recreate it when needed (with some cpu overhead) or moved this to a swap file when the ram structure already in the swap file and release than section.

Which regions are good candidates for this? Buffers, specially in the fs, code region used for processes or even data sections of a long sleeping process…

Checking your data, if those 5gb are created over a long period of time I would not care a lot about it. Remeber how big the swap is, isn’t that important vs real traffic (in or out) to it

The only thing I can tell is that it is totally worthless.

Because you can not have an uga ipv6, then obviously you will have an ula served via dhcpv6 with ipv4 local address (double stack).

And in this point you will realize that most computers implementation select which ip address to use following prio: ipv6 uga -> ipv4 -> ipv6 ula

So even if you do all the things right, your clients will not use it because ipv4 is there and you cannot deselect it because I assume you still want connectivity

Funny, right? :)