New Year, New IPv6 Deployments

And my ISP is still handing me only /64's that keep changing ever so often...

Anyone know of a good firewall that handles this? Got pfSense currently but it really doesn't handle this well (especially when prefix changes).