DS-Lite means full ipv6 access, but ipv4 is NATted by the carrier. If you try to access it from a network that only supports ipv4, the carrier’s NAT will probably block it. If your internal DNS points to the external IPv4, that might cause the problem.
No need, that’s why we have the Don’t Fragment bit in the IP header