Merge overlapping IP ranges, aggregate CIDR blocks, and minimize firewall rules. Supports allow/deny list optimization.
IP Range Merger & Optimizer reduces a collection of IP ranges and CIDR blocks to a smaller representation of the same address coverage. It normalizes the supplied boundaries, removes duplicate or contained coverage, joins compatible intervals, and expresses the result as aggregated CIDR prefixes. Users are often surprised when adjacent blocks merge even though they do not overlap. The larger prefix is valid only when it covers exactly their combined address set. Firewall lists can be sensitive, so processing remains in the browser and nothing is uploaded.
A concrete input and expected output from the current implementation.
Input
192.0.2.0/25 192.0.2.128/25
Expected output
192.0.2.0/24
The first /25 covers 192.0.2.0 through 192.0.2.127, and the second covers 192.0.2.128 through 192.0.2.255. Together they form the aligned 256-address block represented exactly by 192.0.2.0/24.
Each CIDR prefix denotes a contiguous, power-of-two-sized address block aligned on a matching boundary. The optimizer compares the actual first and last addresses represented by every entry. Duplicate blocks and blocks wholly contained inside another entry add no new coverage, so they can be removed without changing which addresses the resulting list matches.
Overlapping or directly adjacent coverage is treated as a union of addresses. That union is divided into the largest correctly aligned CIDR blocks that do not include any address outside the input coverage. A pair can become one shorter prefix only when its combined size and boundary permit it; otherwise the exact result requires multiple prefixes.
No. One CIDR block must contain a power-of-two number of addresses and begin on the corresponding binary boundary. An arbitrary range commonly needs several CIDR prefixes. The optimizer should return multiple prefixes when one larger prefix would include addresses before the stated start or after the stated end.
Not by itself. It can preserve the set of addresses represented by each list, but firewall behavior can also depend on rule order, first-match or last-match processing, ports, protocols, interfaces, and exceptions. Optimize address sets with the same action separately, then verify the final policy in the target firewall.
The example and behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.