About IP / CIDR Calculator
Parse any CIDR like <code>10.0.0.0/16</code> and get network address, broadcast, usable host range, total and usable counts, netmask, wildcard, and a per-octet binary breakdown. Detects RFC 1918 private ranges, link-local, multicast, and loopback. Basic IPv6 support including ULA / link-local detection.
What CIDR notation says
10.0.0.0/16 says “this network and the next 65,535 addresses.” The /16 is the prefix length — the count of leading bits that match the network address. Everything after that varies, those addresses are hosts within the network.
The notation collapses several legacy concepts (Class A/B/C, fixed netmasks) into one number. Modern routing, AWS VPC, Kubernetes pod networks, Google Cloud subnets — all CIDR.
What the calculator gives you
| Field | Example for 10.0.0.0/16 |
|---|---|
| Network | 10.0.0.0 |
| Broadcast | 10.0.255.255 |
| First host | 10.0.0.1 |
| Last host | 10.0.255.254 |
| Total addresses | 65,536 |
| Usable hosts | 65,534 |
| Netmask | 255.255.0.0 |
| Wildcard | 0.0.255.255 |
| Class | RFC 1918 private |
| Binary | full per-octet breakdown |
Common workflows
Plan an AWS VPC. Pick a /16, split into AZ-aligned /20s. The subnet split panel hands you each subnet’s bounds without paper math.
Verify a security-group source. Paste the source CIDR, confirm the host range matches what you expect to allow.
Audit a firewall rule. A rule allowing 0.0.0.0/0 is “everything.” 10.0.0.0/8 is your private range. 192.168.1.0/24 is one local net. The breakdown makes intent obvious.
Convert legacy netmasks. Some old gear takes 255.255.255.0 not /24. Both directions work — paste either, get both.
Sanity-check a peering range. Two networks that overlap fail to peer. Paste both CIDRs, eyeball the bounds, fix before deploying.
Why CIDR is everywhere
CIDR (Classless Inter-Domain Routing, RFC 4632) replaced fixed-width address classes in 1993. It scaled IPv4 by another 25 years, became the lingua franca for cloud subnetting, and survives unchanged in IPv6. Knowing how to read it cold pays back forever.
Frequently asked questions
What is "usable hosts" vs total?
How does RFC 1918 detection work?
10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) plus carrier-grade NAT (100.64.0.0/10) and link-local (169.254.0.0/16). The badge at the top shows what class your address falls into.What is a wildcard mask?
/24 netmask is 255.255.255.0; wildcard is 0.0.0.255.Does it support IPv6?
fe80::/10), compute network and host portions, detect ULA fc00::/7, link-local fe80::/10, multicast ff00::/8, and loopback. The /128 single-host case is handled.How do I split a /16 into /24s?
Why does my AWS VPC reject a /24?
Related tools
Last updated: 2025-01-15