Networking tools that run on your machine

Subnetting, addressing plans and network design, calculated in your browser. Your addressing plan is not something to hand to a website, so these tools do not ask for it.

Home › Networking

Local toolsEverything on this page is arithmetic performed by your browser. No addressing plan, topology or hostname is uploaded, and there is no server that could receive one.

The whole design

Where the pieces have to agree with each other.

firewallcoreaccessaccessserver6 segments · 0 errors · 0 warningsNetwork Architecture DesignerDevices, links, VLANs and addressing in one project, checked by every rule the other tools use and exported as a document you keep.Flagship

IP & subnetting

Address arithmetic, done once and shared by every tool here.

192.168.1.130 / 24networkhost192.168.1.0 – .255254 usableSubnet CalculatorNetwork, broadcast, usable range, mask and wildcard, with the network and host bits shown. IPv4 and IPv6.Start here /23/25/27/24free500 100 25 240 hostspacked largest firstVLSM DesignerGive it host counts per segment and it packs the parent network without gaps, sizing for growth and saying what did not fit.Flagship 203.0.113.64/26…113.64…113.12764 addresses62 usable hostsCIDR Range CalculatorA prefix in, its boundaries out — first, last, how many, what it splits into and what it sits inside. .1 → .1009 prefixesexact — nothing outside the rangeIP Range to CIDRTwo addresses in, the smallest exact set of prefixes out. Never covers an address you did not ask for.Exact 10.0.0.0/23only true siblings mergeCIDR AggregatorMerges a list down to the smallest equivalent set, and refuses to merge prefixes that only look adjacent. 2001:0db8:0000:0000:8a2e:0370:7334:00012001:db8::8a2e:370:7334:1longest zero run onlyIPv6 VisualizerExpand, compress and explain — including why a single zero group is never written as a double colon.RFC 5952

VLAN & segmentation

Broadcast domains, the addressing that goes with them, and the misconfigurations that join two networks silently.

10.120.130.1gateway · pool · freeVLAN + Subnet DesignerName your VLANs and say how many devices each holds. It allocates subnets, proposes gateways and DHCP pools, then checks the plan for what actually breaks networks.Flagship 110203010.0.1.0/2410.0.10.0/2410.0.20.0/2410.0.10.128/25!!2 problems foundVLAN PlannerFor a scheme you already run. Write down what is really there and find the overlaps, bad gateways and DHCP pools that cover a router. sw1sw2802.1Qvlan 10untaggeduntaggedtag added here, removed therenative VLAN crosses untaggedVLAN Trunk VisualizerWatch a tag added and removed across a trunk — and what a native VLAN mismatch does to a frame when neither switch logs anything.Teaching 2001:db8:1234::/48:0:1:2:3:4each a /6465,536 availableIPv6 Subnet PlannerDivide a delegated prefix into subnets. Counts subnets rather than hosts, because host counts do not constrain an IPv6 plan.

Address management

Somewhere to keep the plan, and the separate routing tables it may live in.

Staff10.30.10.0/24Voice10.30.20.0/24Cameras10.30.50.0/25Mgmt10.30.99.0/274 subnets · 12 assignments · no problemsIPAM LiteSubnets, gateways, DHCP scopes and the static assignments everyone forgets — validated as you type and saved to a file you control.Flagship hubABChubABCspokes reach the hub, not each otherVRF PlannerSeparate routing tables, their route targets, and a matrix of who can actually reach whom — including the reachability nobody intended.

Routing

Where traffic actually goes, and why a router chose that and not the other one.

area 0area 1area 2every area touches the backbonethe dots are area border routersOSPF Area DesignerRouters, areas and link costs in; shortest paths, equal-cost splits and the area faults that stop OSPF working out. 100 Mb1 Gb10 Gb100 Gb1same costref100OSPF Cost CalculatorCost from bandwidth, and which link speeds become indistinguishable at the reference bandwidth almost nobody changed. Provider Alp 1001 hopProvider Blp 2003 hopsProvider Clp 1002 hopslocal preference decided itBGP Best-Path SimulatorCandidate routes in, the winner out, and the step that decided it — including the MED comparison that catches everyone.Step by step 6450064500645003356{64496…}prepended three timesAS_SETlength 5, not 7a set counts as oneAS-Path VisualizerLength as BGP counts it, prepending, loops and private ASNs — and why an AS_SET counts as one entry. 65000:100standard65000:1:200largeno-exportwell knownmeaning is whatever that AS publishedBGP Community BuilderStandard and large communities parsed and named, with the well-known values recognised.

MPLS & segment routing

Label switching, and the arithmetic that replaced a protocol.

PE1pushP1swapP2popPE2VRFtransport label popped, VPN label survivesMPLS Label Stack VisualizerA packet hop by hop: labels pushed, swapped and popped, and why the VPN label survives penultimate hop popping.Very high hdrmpls1478 bytes left1500-byte underlay22 bytes of overheadMTU & Encapsulation CalculatorStack up what a packet is wrapped in and see the overhead, the payload left, and the underlay MTU a full packet really needs. 16000SRGB base+5SID=16005from the SRGB of the router being reachednot the one imposing itSRGB & Prefix-SID PlannerPlan SRGBs and prefix SIDs, and build a segment list into a label stack. Catches duplicate SIDs and inconsistent ranges. SRPE1LDPSRP1LDPSRP2SRPE2every adjacency must share oneMPLS to SR Migration PlannerModel a staged move from LDP to segment routing and find the stage where transport would break.

Fabrics & infrastructure

Data centre fabrics, and the things that make an office network work or not.

spine1spine2leaf1leaf2leaf3overlay tunnelEVPN/VXLAN Fabric DesignerLeaf-spine design with underlay and overlay views, checking Clos rules, VTEPs, the VNI plan and the MTU that VXLAN quietly needs.Flagship 440 Wspare740 W switch budget12 af4 at4 at1 afclass allocation, not measured drawPoE Power Budget CalculatorWhat your powered devices reserve against what the switch actually has — which is set by its power supply, not its port count. 12 cameras · 40 Mbit/s341 GB / dayfrom bitrate, not resolutionCamera Network & Storage PlannerBandwidth and retention storage worked out from the bitrate you set, because resolution alone decides neither. 2.4 GHz1611only three genuinely clearnumbered every 5 MHz, occupying 22Wi-Fi Channel & Capacity PlannerWhich channels your regulator allows, how many are genuinely clear at each width, and how many access points a room full of people needs. Laptop Wi-Fi400Access point1000Switch1000NAS2500the narrowest hop decides the pathBandwidth & Bottleneck PlannerRealistic concurrent demand rather than the total nobody reaches, and the narrowest hop that decides a path whatever the rest can do.

DNS & mail

The first tools here that have to ask somebody. They say exactly what is sent.

MX2 hostsSPF6 of 10 lookupsDMARCp=rejectDKIMselector neededwhat a receiver will actually doEmail DNS AnalyzerMX, SPF, DMARC and DKIM, with the ten-lookup limit counted through nested includes and every finding explained in plain terms.Network request A104.16.132.2294 minAAAA2606:4700::68103 minMX10 mail.example19 minNSns1.example.com23 hTTL decides how long a change takesDNS InspectorA domain's records with their TTLs and DNSSEC status, looked up by your browser rather than through us.Network request

What is not here

The vertical the brief laid out is built. What is not here, and will not be without a server: certificate details, HTTP response headers, redirect chains and protocol negotiation. A browser cannot read another origin's headers or its peer certificate, so those would need a backend rather than a promise.

On the tools that ask somebody. The DNS and mail tools genuinely cannot answer their question without a lookup, so they carry a different badge and say exactly what is sent: the domain name, to a resolver you pick, straight from your browser. Toolsfully has no server in the path and never sees the query. Everything else on this page is arithmetic and touches nothing. A handful of checks — certificate details, HTTP response headers, redirect chains — cannot be done from a browser at all and would need a server; those are being weighed rather than faked.

The rule these tools are built on

An addressing plan describes where things are and how to reach them. It is exactly the document you would not paste into an unfamiliar website, and most free subnet calculators are websites you paste it into.

Everything here is arithmetic, and arithmetic does not need a server. The shared IP engine behind these pages is tested against the cases where calculators usually disagree with real equipment: a /31 has two usable addresses because RFC 3021 says so, a /32 is a single host route, IPv6 has no broadcast address to subtract, and a mask like 255.255.0.255 is refused rather than quietly interpreted.