redzilla
All tools
IP Addressing

Subnet Overlap

Paste a list of CIDR networks (IPv4 or IPv6, one per line) and find out which pairs overlap or whether one network contains another, and check whether a single IP falls inside any of them. Nothing is sent to any server.

One per line (or separated by comma/space). Accepts IPv4/CIDR, IPv6/CIDR or a single IP (/32 for IPv4, /128 for IPv6).

IPv4 or IPv6 (no prefix). Every network in the list that contains it is marked.

Runs locally in your browser · no sign-up · nothing leaves your browser.

How it works

The checker takes a list of CIDR networks (IPv4 or IPv6, one per line) and detects which pairs overlap and which ones are contained inside another network. You can also enter a single IP and the tool flags every network on the list that contains it. It is the typical check before advertising routes, building site-to-site VPNs or assigning blocks to new sites.

Each CIDR is converted to an integer range [start, end]: IPv4 as a 32-bit unsigned integer and IPv6 as a 128-bit integer (using BigInt). The start is ip AND mask and the end is start + 2^(bits − prefix) − 1. Two networks overlap if start₁ ≤ end₂ and start₂ ≤ end₁; there is containment when one range fits completely inside the other. Only networks of the same family are compared (IPv4 with IPv4, IPv6 with IPv6).

Example: do 192.168.0.0/24 and 192.168.0.128/25 conflict?

  1. 192.168.0.0/24 covers the range .0 to .255 (256 addresses).
  2. 192.168.0.128/25 covers the range .128 to .255 (128 addresses).
  3. Since .128 ≤ .255 and .0 ≤ .255, the ranges intersect; and because the /25 fits entirely inside the /24, the verdict is containment: the /24 contains the /25.
  4. The IP 192.168.0.130 falls inside both networks, so the tool flags them both.

Frequently asked questions

What is the difference between subnet overlap and containment?
Containment is the clean case: one network fits entirely inside another, like 10.0.5.0/24 inside 10.0.0.0/16 (typical of route summaries). Partial overlap happens when the ranges intersect without one containing the other, which only occurs with misaligned ranges and almost always signals a design error. The tool distinguishes both cases in the conflicts table.
What happens if two VPNs or two sites use the same subnet?
Routing becomes ambiguous: the router cannot tell which site an IP belongs to, so traffic gets lost or reaches the wrong destination. The usual fix is renumbering one of the sites or applying 1:1 NAT on the tunnel. That is why it pays to check for overlap before bringing up the VPN, not after.
Can I mix IPv4 and IPv6 networks in the same comparison?
Yes, you can paste them together: the tool classifies each entry by family and only compares IPv4 against IPv4 and IPv6 against IPv6, because they are separate address spaces. A bare IP without a prefix is treated as /32 (IPv4) or /128 (IPv6).
Is it safe to paste my company internal networks here?
Yes. The whole analysis runs in your browser using local integer arithmetic: no network or IP is ever sent to a server, so you can use it with private addressing plans without exposing them.
Was this tool useful?
Disclaimer We take great care to keep every tool accurate and review it thoroughly; even so, we can't guarantee it is free of errors or take responsibility for how the results are used. We recommend double-checking anything critical.
Found an error? Let us know →