I'm working for the ".at" ccTLD registry, and we're currently
investigating the implications of adding v6 transport to our WHOIS
servers. For data protection & load management reasons, those WHOIS
servers are currently configured to apply rate limiting on the
application level on a per-IPv4-address basis, for example "5 queries
per hour, 100 queries per day" (etc). This works quite well on IPv4,
since acquiring a new IPv4 address is not trivial in most scenarios.
With the introduction of IPv6, the "per IP" strategy obvioulsy doesn't
work anymore like this, because any host with a /64 can essentially
generate a new IP address for each request.
A simple approach would be to aggregate requests by prefix (/64 or /56
or even /48?), and use that prefix instead of the full IP adress. This
problem is not specific to our WHOIS use case, but will show up in SMTP
rate limiting, ssh blacklisting applications, SIP registration servers,
etc..