NetoStack

Saved network calculations and frequently used tools

Offline mode and cached calculations

Calculate subnet information, network addresses, broadcast addresses, and host ranges with visual network analysis

Calculate IPv6 subnets with 128-bit addressing and modern network prefix planning

Variable Length Subnet Mask calculator to break networks into multiple smaller subnets with optimal allocation

Aggregate multiple networks into supernets for route summarization and efficient routing table management

Design VLSM networks with drag-and-drop subnet planning and optimize address allocation strategies

Convert CIDR notation (e.g. /24) to subnet mask format (255.255.255.0)

Convert subnet mask format (255.255.255.0) to CIDR notation (/24)

Optimize mixed IP addresses, CIDR blocks, and ranges into minimal CIDR prefixes

Split a network into N equal child subnets or to a target prefix length

Find available subnets from pools minus allocations with first-fit or best-fit policies

List all free blocks in pool CIDRs minus allocations, filterable by target prefix length

Decompose CIDR blocks and ranges into uniform target prefix subnets (e.g., break into /24s)

Compare two lists of CIDR blocks to identify added, removed, and unchanged entries after normalization

Pack requested subnet sizes into network pools using bin-packing algorithms (first-fit, best-fit)

Check if IP addresses and ranges align to CIDR prefix boundaries with optimization suggestions

Convert between CIDR, subnet masks, and wildcard masks with ACL rule generation

Compute A - B set operations on CIDR blocks, ranges, and IP addresses

Detect intersections between two sets of IP addresses and ranges

Check if one set fully contains another with detailed containment analysis

Convert IP addresses between decimal, binary, hexadecimal, and octal number systems

Calculate the number of addresses between two IPs with inclusive/exclusive counting

Resolve the IP address at a specific index within networks and ranges with offset support

Generate random IP addresses from networks with uniqueness control and seeded randomness

Generate safe regular expressions for matching IPv4 and IPv6 addresses with customizable validation options

Validate IPv4 and IPv6 addresses with detailed error analysis and format checking

Safely enumerate all IP addresses in CIDR blocks and ranges with CSV/JSON export

Expand compressed IPv6 addresses to full 128-bit hexadecimal format

Compress expanded IPv6 addresses using :: notation and removing leading zeros

Normalize IPv6 addresses to RFC 5952 canonical form with step-by-step transformation

Process IPv6 addresses with zone identifiers for link-local and multicast addresses

Compute solicited-node multicast addresses from IPv6 unicast for Neighbor Discovery Protocol

Parse Teredo IPv6 addresses to extract server IPv4, flags, mapped port, and client IPv4 components

Translate between IPv4 and IPv6 addresses using NAT64 prefix (64:ff9b::/96 or custom)

Convert IPv4 addresses to IPv6 format using IPv4-mapped IPv6 addressing

Extract IPv4 addresses from IPv4-mapped IPv6 addresses

Convert between MAC addresses and IPv6 EUI-64 interface identifiers with IPv6 generation

Generate RFC 4193 Unique Local Addresses with cryptographically secure Global IDs

Generate PTR records for reverse DNS zones

Convert IPs/CIDRs to PTR names (in-addr.arpa / ip6.arpa) and example zone lines

Generate full reverse zone files from CIDR + hostname template

Minimal set of reverse zones needed to delegate a CIDR (v4 & v6 nibble math)

Plan PTR coverage for a block; list missing/extra PTRs against naming pattern

Bulk create A and AAAA record sets from IP lists with TTL and RRset controls

Build valid CNAME records with loop detection and self-target checks

Plan MX record priorities with fallback guidance and sample configurations

Compose SRV records with service, protocol, priority, weight, port, and target validation

Safely escape and split TXT record strings into 255-character chunks with validation

Craft SPF policies with mechanism validation, qualifier control, and DNS lookup counting

Generate DKIM RSA keypairs (1024/2048-bit) with selectors and DNS TXT records

Create DMARC policies with alignment options, reporting addresses, and failure handling

Build CAA records for certificate authority authorization with misconfiguration warnings

Create TLSA (DANE) records from certificates or hashes with usage, selector, and matching type options

Generate SSHFP records from SSH public keys or fingerprints with algorithm and fingerprint type selection

Build SVCB and HTTPS resource records with service parameters like ALPN, port, and ECH configuration

Construct NAPTR records for service discovery with order, preference, flags, service, regexp, and replacement fields

Create LOC records from coordinates and convert between latitude/longitude and DNS LOC format

Generate RP (Responsible Person) records with mailbox and TXT domain name references

Convert Unicode domain names to Punycode and back with IDNA2008 normalization support

Validate individual DNS resource record syntax (A/AAAA/CNAME/MX/TXT/SRV/CAA) with error detection

Humanize DNS TTL values and compute cache expiry times with recommendations

Estimate DNS message size and UDP fragmentation risk with EDNS buffer recommendations

Normalize domain labels with homograph attack detection and script mixing warnings

Normalize and canonicalize BIND zone files with error checking and formatting

Compare two zone files and identify added, removed, and changed DNS records

Analyze zone file structure, record distribution, and configuration health

Validate DNS names against RFC length limits: 63 bytes per label, 255 bytes per FQDN

Compute the DNSKEY key tag from a DNSKEY RR (RFC 4034 algorithm) and display it alongside key meta

Generate DS records (SHA-1/256/384) from a DNSKEY or public key, with copyable output for parent submission

Calculate NSEC3 owner hashes for a name given salt, iterations, and algorithm, showing the hashed owner FQDN

Build CDS/CDNSKEY RRs from child DNSKEYs to enable automated DS updates at the parent

Suggest RRSIG validity windows (inception/expiration) based on TTLs and desired overlap, with renewal lead-time guidance

Resolve DNS records (A, AAAA, CNAME, MX, TXT, NS, SOA, CAA) using various public resolvers or custom DNS servers

Perform reverse DNS lookups (PTR records) for IPv4 and IPv6 addresses with automatic zone formatting

Check DNS record propagation across multiple public resolvers (Cloudflare, Google, Quad9, OpenDNS)

Analyze SPF records with recursive expansion of includes/redirects and DNS lookup limit tracking

Analyze DMARC policies, check alignment settings, and identify configuration issues

Walk domain label chain to find effective CAA policies for certificate authority authorization

Verify nameserver resolution and analyze SOA record parameters for DNS configuration health

Query DNS records via DoH and report if the AD (Authenticated Data) bit is set for DNSSEC validation

Analyze Start of Authority records to interpret serial number formats and examine DNS zone timing parameters

Analyze HTTP headers and response metadata with custom method and header support

Follow HTTP redirects and trace the full chain with security upgrade detection

Analyze security headers (HSTS, CSP, X-Frame-Options) with grading and recommendations

Test CORS policies with preflight requests and origin validation

Measure HTTP performance timing including DNS, TCP, TLS, and TTFB metrics

Analyze TLS certificates, view certificate chains, check expiration dates, and examine Subject Alternative Names

Test which TLS protocol versions a server supports and assess overall security posture

Test Application-Layer Protocol Negotiation to see which protocol a server selects (HTTP/2, HTTP/3)

Test TCP connectivity to host:port combinations and measure connection latency

Measure HTTP/HTTPS response latency with statistical analysis (median, p95) without raw ICMP

Check mail server (MX) health including DNS resolution and SMTP port connectivity testing

Analyze SPF records with email deliverability focus and authentication policy evaluation

Check DMARC policies with email deliverability impact analysis and configuration recommendations

Query domain registration data using RDAP through IANA bootstrap registry with structured JSON responses

Look up IP address allocation and registration data using RDAP through Regional Internet Registries

Query Autonomous System Number allocation and registration data using RDAP through RIR services

What CIDR is, why it replaced IP classes, and how to read network prefixes

Variable Length Subnet Masking - when to use it and common pitfalls

Combine multiple networks into single routes for efficient routing

Global unicast, ULA, link-local, multicast, and special IPv6 addresses

Quick reference for /128, /127, /64, /60, /56, /48, /32 with typical uses

IPv4-mapped addresses, 6to4, Teredo, and transition mechanisms

SLAAC privacy extensions: temporary vs stable interface identifiers

Quick reference for common subnet sizes and host counts

Legacy network classes and their modern CIDR equivalents

Comprehensive list of reserved and special-use IP address ranges

Reserved IPv4 ranges including private networks, CGNAT, and test blocks

Understanding private/public IPs, NAT implications, and identification

CGNAT (100.64.0.0/10), how to identify it, and service impacts

IPv4 APIPA (169.254/16) and IPv6 link-local (fe80::/10) at a glance

Multicast scopes, well-known groups, and local subnet limitations

How in-addr.arpa and ip6.arpa work with examples for IPv4 and IPv6

Minimal reverse DNS zones needed to delegate IPv4 and IPv6 CIDR blocks

Practical guide to ICMP message types for network troubleshooting

Side-by-side comparison of IPv4 ARP and IPv6 Neighbor Discovery

Autonomous Systems, BGP basics, and how IP addresses map to ASNs

Quick reference for frequently used port numbers and services

Wildcard masks vs netmasks, quick conversions and ACL examples

MTU and MSS values for Ethernet, PPPoE, VPN, and overhead calculations