What a lot of nonsense. Of course the technology exists and of course it can be done. But in reality is not done because it simply doesn't bring any benefit.
And in addition a address translation is not nat (tm) because the server can be hit from the outside.
Today in ipv4 we have likely 2 Nats, 1 after your router and the other by the carrier (cgnat) and ipv6 those are non existent
It is a docker engine with the streaming already incorporates. Try that.
It is true that it relies in wine, so perhaps you will need to experiment a bit and pin down a specific wine version. But if I recall correctly I saw an old version of ms office running in wine
Are both of them ula addresses? (both of them starting with 2). If they are not the same then the ISP is providing an internal unique address for isp internal configurations.
If so, are they having the same network? ( The first 48 bits) if not, then is probably a miss configuration but probably in their side. But with no practical effects. You could ignore it.
If yes again, then it is a miss configuration and it shouldn't happen, but this time it could be in your side, check that the dhcpv6 daemon doesn't try to give an ipv6 address To your Wan port
Honestly, every hw that is not going automatically into a power save mode when not used is utterly crap, even my home grade switches are able to do so.
So, the only thing you need to do is to buy recent hw and of course not over size your hw necessities. But recent hw tends to be more expensive, so in the end, it is an excel driven decission.
And once this is said, be careful, some hw suffer more for a on/off cycle than from a continuous power on mode. Think in hdd power cycles or condensation/ salt-rust problems in high humidity areas.
Still it is not clear to me how the internal reverse proxy may get a valid certificate when the domain name is pointing to the vps. Do you copy later manually to the internal proxy?
And if so, how do you overcome the invalid certificate warning when you are accessing your services locally?
If you are interested in the photo storage then start..... With the storage.
So pick up a nas or something similar, pay a bit more for the super intuitive fancy gui product and the start from there.
Learn what is nas and how to connect to a pc
Thne learn how to do the same with your smartphone
Then learn a bit about networking
Then... Continuous for the hardest itch and try to Scratch it
And if you need support, come back here, check videos and web pages or even chatgpt, for the basic stuff is quite acceptable
In any case, mandos has a possibility to do it automatically via rsa encryption, so you have the possibility of totally unattended restart.
Because the server is (ideally) in a different location, if one of yiur systems is stolen / compromised then you only delete / revoked the certificates ID and then that machine would not be able to decrypt its own luks system.
I never deployed this system on my own, but I know a few guys who did it
You are partially right, I was fast and sloppy and I gave the impression all is jitted and it is not the reality.
The part of the translation is fine. However there are parts that are compiled beforehand (shaders for example and I can recall something about arm or other architectures, not sure now). And this is a crucial point of the extra performance, because some parts can be ported to more updated/efficient implementations, not because there are less services in the background.
As far as I know for the new Vulkans layers and dx12 implementation there is a "translation layer" from the old dx implementation to the most updated one. This is the main reason why old games runs faster on Proton than in w7 for the same hw. Even if they were designed for w7 specifically.
Last time I checked this was done during the booting of the game, but i have to admit this was time ago and it could have been changed.
Seems like a very reasonable reason to switch to another isp well established in the 21st century