IPV4 vs IPV6 addresses

[Miles28 3]

Currently, when I want to access my Emby server from outside my house, I do so by first connecting to a Wireguard VPN that I have enabled on the router. The Emby server also runs on the router in a docker container.
I have recently changed ISP that gives me IPV4 and IPV6 service. Which has led me to think about the possibility of changing the access mode by accessing Emby through an IPV6 address.
I am not a computer networking professional and everything I do is because I really like this subject and I read everything I can about it, although I lack basic training in networking.
My question is this: Is the change to access through IPV6 worth it or am I making myself unnecessarily complicated?
Thanks in advance.

[Luke 42077]

HI, do you have an actual reason to do this? Because if not then it sounds to me like the only thing you're going to notice is that you'll have a painfully long ip address to type in.

[Q-Droid 989]

IPv6 is worth exploring. Eventually it will be the only option.

It might be a little more complex but often it's the workarounds to avoid IPv6 or deal with IPv4 exhaustion that are complicated. That said you do have Emby running on your router(?) which in my opinion puts it too close to the edge and maybe the WG VPN is the more secure way for now.

[Miles28 3]

9 hours ago, Q-Droid said:

IPv6 is worth exploring. Eventually it will be the only option.

It might be a little more complex but often it's the workarounds to avoid IPv6 or deal with IPv4 exhaustion that are complicated. That said you do have Emby running on your router(?) which in my opinion puts it too close to the edge and maybe the WG VPN is the more secure way for now.

Yes, Emby server runs in a docker container set up over OpenWRT, but router firewall drops all packages from wan zone to container ipv4 ip.
https://www.jeffgeerling.com/blog/2020/be-careful-docker-might-be-exposing-ports-world 

[Q-Droid 989]

4 hours ago, Miles28 said:

Yes, Emby server runs in a docker container set up over OpenWRT, but router firewall drops all packages from wan zone to container ipv4 ip.
https://www.jeffgeerling.com/blog/2020/be-careful-docker-might-be-exposing-ports-world 

Until it doesn't. In most circumstances if a router is vulnerable it can expose your network but a bad actor still has to work through it to gain access to other systems, applications and files. But if a router is also running applications, services and has storage attached, well that's a big time saver.

[adminExitium 355]

Even a basic Raspberry Pi or equivalent will be a lot more secure than running it directly on the router.

As for the IPv4 vs IPv6, easiest would be to configure the Wireguard Server to listen on both the IPv4 & IPv6 addresses and continue using IPv4 for the actual device address.