IPv6 source address randomization?

Hi everyone,

I am using nftables on a VPS with a public /64 IPv6 subnet as a personal VPN server. All IPv6 traffic is NATted using the server's public IPv6 address. The rest of the /64 subnet remains unused.

However, for privacy reasons, I'd like to use different IPv6 addresses for different connections. In the best case, outgoing connections would use a random source address and port combination. Is something like this possible using nftable's masquerade or snat options?

Thanks a lot for any ideas!

lukaro