use-case: dynamic IPv6 port forwarding

[glyph]

Here's what I'm trying to do: I'd like to be able to, on demand, expose port 443 on various network devices over IPv6. Each one has a globally routable address, after all, and so I should be able to do this. I already have automation on the DNS side of things; I just need to expose the network port.

• I can't do it with static firewall configuration. Unifi doesn't support suffix masking so I can't mask out the prefix delegation and forward just the unchanging part of a machine's IP.
• I can't do it with UPnP. I can't find any documentation on this, and whether it's a UPnP restriction or a Unifi configuration issue, but upnpc gets a "failed with code 606 (Action not authorized)" for port numbers less than 1024.
• I can't do it with ULA addresses and NAT66, since that seems to just be totally unsupported.
• I can't (currently) do it with pyunifi because it doesn't expose these objects via the API.

https://github.com/nickovs/unificontrol seems like it might expose some of the relevant APIs via list_networkconf and set_networksettings, but I can't experiment with those since I have a UDM pro and that library can't authenticate against a UDM Pro whereas this one can.

These APIs appear to be specified declaratively which might help copy them (and all the others, for that matter) into this library without too much additional work.