[WAF] Update IPv6 addresses (#23502)

Author: pedrosousa

src/content/docs/waf/tools/ip-access-rules/parameters.mdx

@@ -19,13 +19,14 @@ An IP Access rule will apply a certain action to incoming traffic based on the v
 
 ## IP range
 
-| Type             | Example value    | Start of range | End of range                             |                    Number of addresses |
-| ---------------- | ---------------- | -------------- | ---------------------------------------- | -------------------------------------: |
-| IPv4 `/24` range | `192.0.2.0/24`   | `192.0.2.0`    | `192.0.2.255`                            |                                    256 |
-| IPv4 `/16` range | `192.168.0.0/16` | `192.168.0.0`  | `192.168.255.255`                        |                                 65,536 |
-| IPv6 `/64` range | `2001:db8::/64`  | `2001:db8::`   | `2001:db8:0000:0000:ffff:ffff:ffff:ffff` |             18,446,744,073,709,551,616 |
-| IPv6 `/48` range | `2001:db8::/48`  | `2001:db8::`   | `2001:db8:0000:ffff:ffff:ffff:ffff:ffff` |      1,208,925,819,614,629,174,706,176 |
-| IPv6 `/32` range | `2001:db8::/32`  | `2001:db8::`   | `2001:db8:ffff:ffff:ffff:ffff:ffff:ffff` | 79,228,162,514,264,337,593,543,950,336 |
+| Type              | Example value    | Start of range | End of range                             |                    Number of addresses |
+| ----------------- | ---------------- | -------------- | ---------------------------------------- | -------------------------------------: |
+| IPv4 `/24` range  | `192.0.2.0/24`   | `192.0.2.0`    | `192.0.2.255`                            |                                    256 |
+| IPv4 `/16` range  | `192.168.0.0/16` | `192.168.0.0`  | `192.168.255.255`                        |                                 65,536 |
+| IPv6 `/128` range | `2001:db8::/128` | `2001:db8::`   | `2001:db8::`                             |                                      1 |
+| IPv6 `/64` range  | `2001:db8::/64`  | `2001:db8::`   | `2001:db8:0000:0000:ffff:ffff:ffff:ffff` |             18,446,744,073,709,551,616 |
+| IPv6 `/48` range  | `2001:db8::/48`  | `2001:db8::`   | `2001:db8:0000:ffff:ffff:ffff:ffff:ffff` |      1,208,925,819,614,629,174,706,176 |
+| IPv6 `/32` range  | `2001:db8::/32`  | `2001:db8::`   | `2001:db8:ffff:ffff:ffff:ffff:ffff:ffff` | 79,228,162,514,264,337,593,543,950,336 |
 
 ## Country
 

src/content/docs/waf/tools/lists/custom-lists.mdx

@@ -55,23 +55,11 @@ For more information and examples, refer to [Use lists in expressions](/waf/tool
 List items in custom lists with IP addresses must be in one of the following formats:
 
 - Individual IPv4 addresses
+- Individual IPv6 addresses
 - IPv4 CIDR ranges with a prefix from `/8` to `/32`
-- IPv6 CIDR ranges with a prefix from `/12` to `/64`
+- IPv6 CIDR ranges with a prefix from `/12` to `/128`
 
-You can combine individual addresses and CIDR ranges in the same list.
-
-:::note
-
-To specify an IPv6 address, enter it as a CIDR range with a `/64` prefix, the largest supported prefix for IPv6 CIDR ranges.
-
-For example, instead of `2001:db8:6a0b:1a01:d423:43b9:13c5:2e8f`, enter one of the following:
-
-- `2001:db8:6a0b:1a01:0000:0000:0000:0000/64`
-- `2001:db8:6a0b:1a01::/64` (using the [double colon notation](https://tools.ietf.org/html/rfc5952#section-4.2))
-
-The IPv6 address topology describes the last 64 bits as the host identifier. Matching on a `/128` prefix would identify a specific IPv6 address, but not the host in general. It would be possible for an attacker to change their specific IPv6 address from a single machine.
-
-:::
+The same list can contain both individual addresses and CIDR ranges.
 
 You can use uppercase or lowercase characters for IPv6 addresses in lists. However, when you save the list, uppercase characters are converted to lowercase.
 

src/content/docs/waf/tools/lists/lists-api/json-object.mdx

@@ -219,9 +219,9 @@ The JSON object properties for a list item are defined as follows:
 					Any of these formats can exist in the same custom list with IP addresses:
 					<ul>
 						<li>IPv4 address</li>
-						<li>IPv6 (up to <code>/64</code>) address</li>
-						<li>IPv4 ranges as <code>/32</code> through <code>/2</code> CIDRs</li>
-						<li>IPv6 ranges as <code>/64</code> through <code>/4</code> CIDRs</li>
+						<li>IPv6 address</li>
+						<li>IPv4 ranges as <code>/8</code> through <code>/32</code> CIDRs</li>
+						<li>IPv6 ranges as <code>/12</code> through <code>/128</code> CIDRs</li>
 					</ul>
 				</p>
 			</td>