ip -6 neigh add proxy MY_PUBLIC_IPv6:2000::1 dev eth0
ip -6 neigh add proxy MY_PUBLIC_IPv6:2000::1000 dev eth0

sysctl -w net.ipv6.conf.all.forwarding=1
sysctl -w net.ipv6.conf.all.proxy_ndp=1

ip6tables -I FORWARD 1 -s MY_PUBLIC_IPv6:2000::/67 -i tun0 -o eth0 -m state --state NEW -j ACCEPT
ip6tables -I FORWARD 2 -d MY_PUBLIC_IPv6:2000::/67 -i eth0 -o tun0 -m state --state NEW -j ACCEPT
ip6tables -I FORWARD 3 -m state --state RELATED,ESTABLISHED -j ACCEPT

proto tcp6-server
mode server
tls-server
ifconfig 10.1.1.1 10.1.1.30
ifconfig-pool 10.1.1.2 10.1.1.100
tun-ipv6
push tun-ipv6
ifconfig-ipv6 MY_PUBLIC_IPv6:2000::1 MY_PUBLIC_IPv6:2000::100

push "route 10.1.1.0 255.255.255.0"
push "route-ipv6 MY_PUBLIC_IPv6:2000::1/67"
push "route-ipv6 2000::/3"

push "setenv ipv6dns 2001:4860:4860::8888"

interface tun0
{
   AdvSendAdvert on;
   prefix MY_PUBLIC_IPv6:2000::/67
   {
   };
};