I'm operating a few IPv6-only VPNs at work, for access to internal infrastructure.
The biggest problem so far is that Windows and macOS clients need a v6 DNS server.
Otherwise, they won't even try to resolve v6onlyhost.vpn.example.com.
Because the client may or may not be in a v6-enabled network, I have to run a DNS server inside the VPN and push that to the client, which can lead to all kinds of problems when the VPN disconnects but the Wireguard app for some reason fails to reset the DNS to the original one.
replies(2):