BGP Looking Glass
show ip bgp, route-server views, AS-path inspection, and prefix lookups from our network. Powered by hyperglass at lg.ionet.com.au.
Command centre
A growing set of fast, no-signup utilities for working network and security engineers — calculators, decoders, hashers, generators. Everything on this page runs in your browser. Nothing you type leaves your device.
Global view
A live picture of internet health — submarine cable status, BGP route-leak hot zones, and major Internet Exchange Points. The data feeds light up as we bring our Phase 2 backend online; the map below is a preview of what's landing.
World map: world-atlas (Natural Earth, public domain). Submarine cables: TeleGeography submarinecablemap.com, licensed CC BY-SA 4.0.
Phase 2 outage feeds: NBN Co · Telstra · Optus · TPG · Aussie Outages. Aggregator runs on the Oracle VM (Phase 2). See the Coming Soon section for the full Phase 2 tool list.
The toolkit
Eleven tools running entirely in your browser. Cryptographic operations use the Web Crypto API; nothing is sent to a server. Pick a tool to jump straight to it.
Network, broadcast, usable range, mask, wildcard, host count.
Allocate variable-length subnets from a parent prefix.
Parse JWT header and payload locally. No data leaves your browser.
SHA-1, SHA-256, SHA-384, SHA-512 via the Web Crypto API.
Keyed-hash message authentication codes, computed locally.
Encode and decode text to/from Base64.
Percent-encode and decode URL components.
Cryptographically-secure random passwords. Configurable length and charset.
Generate cryptographically-random RFC 4122 UUID v4 values.
IPv4 between dotted-quad, decimal, hex, and binary.
Convert between ASCII, hex, and binary.
IPv4
Enter any IPv4 prefix in CIDR notation — get the network address, broadcast, usable host range, mask, wildcard mask, and host count instantly.
IPv4
Allocate variable-length subnets from a parent prefix in optimal address order. Provide a list of required host counts; the planner picks prefixes that fit and assigns them sequentially.
Identity
Paste a JSON Web Token to inspect its header and payload. Decoding happens entirely client-side — your token never leaves the browser. Signature verification requires the issuer's key and isn't performed here.
Cryptography
Compute SHA-1, SHA-256, SHA-384, or SHA-512 over any text. Uses the browser's Web Crypto API — your input never leaves the page.
Cryptography
Compute a keyed-hash message authentication code (HMAC) using SHA-256. Useful for signing webhook payloads, validating signed cookies, or testing an API integration locally.
Encoding
Quick conversion to and from Base64 for credentials, embedded images, API tokens, and anything else that needs round-trip-safe transport.
Encoding
Percent-encode and decode strings — the right operation for URL query parameters, path components, and form values.
Security
Cryptographically-secure passwords drawn from crypto.getRandomValues. Choose your length and which character classes to include.
Identifiers
Generate cryptographically-random version-4 UUIDs (RFC 4122). Handy for primary keys, idempotency tokens, and correlation IDs.
IPv4
Convert any IPv4 address between dotted-quad, decimal (32-bit integer), hexadecimal, and binary representations.
Encoding
Convert strings between ASCII, hexadecimal, and binary. Useful for embedded debugging, byte-pattern analysis, and CTF-style puzzles.
Phase 2 — landing soon
Tools that need a server vantage point — BGP visibility, traceroute, port reachability, WHOIS — are being built on an ionet-operated, Australian-hosted endpoint. Rate-limited, captcha-gated, and fair-use friendly.
show ip bgp, route-server views, AS-path inspection, and prefix lookups from our network. Powered by hyperglass at lg.ionet.com.au.
Layer-3 path tracing with hop-by-hop loss and latency, run from our PoP and rendered as a clean visualisation.
Check whether a single well-known port on a target is reachable. Captcha-gated, authorisation-gated, rate-limited — not a port scanner.
Authoritative DNS queries with DNSSEC validation, plus reverse DNS, NS-walk, and zone consistency checks.
Domain and IP registration data via the modern RDAP protocol, with WHOIS fallback for legacy records.
Autonomous System lookup, prefix announcements, peer relationships, and hijack alerts.
Certificate chain, expiry, key strength, supported ciphers, and HSTS / CAA / OCSP checks.
CSP, HSTS, X-Frame-Options, Referrer-Policy and friends — graded the way Mozilla Observatory does it, for any URL.
Open call
This page is a living toolkit, written by working engineers. If there's a calculation, decode, or lookup you reach for every week and the rest of the internet has buried in a popup-laden mess — let us build a clean, fast version of it here.
Suggest a tool →The tools you use every day shape how you think. We'd rather you reached for ours than a tab full of ads.