Would use OpenBSD + unbound to get NAT64 + DNS64.
I'd prefer a dual-stack setup with RFC1918 IPv4 internally + a NAT44 gateway and IPv6 "just" on top.
Drawback: if you find yourself to have to do a lot of firewalling it essentially doubles your work.