Experiments with native OVH IPv6 aren't good, and that doesn't offer IP portability, so perhaps a HE tunnel is better?
If we could put a tunnel on router-001 and assign IP relative to it, that would be a good idea too.
A GRE tunnel on the top on Drake is less a good idea.
If not, a tunnel directly on web-001 is acceptable.