Gave up on ndproxy, went for static entries, here's a script if you want
-
CE user here, pfSense user since 1.2. VPS with a single /64, you know the pain. Road warrior with a v6 pool carved out of that /64. It is what it is. NDP proxy or nothing.
All the way up to 2.6 I was able to just drop the prebuilt ndproxy from FreeBSD. No such luck with 2.7 but sources were provided so you could build your own and rebuild with every upgrade. No longer an option with 2.8 it seems, so given that my pools are small I went for static proxy entries, address after address. Sue me.
Attached is a fairly complete script to do this if you're interested. It will install, delete or list the commands to install or delete NDP entries, and if no prefix and/or interface is specified, it will extract the mobile IPv6 pool from swanctl.conf and use the interface where the default inet6 route lives. Shellcmd and you're golden. Enjoy.
[LLM tokens used: zero]