Netdash
A cross-platform network engineering workbench: 40+ tools, RFC-correct IP math in the browser, and a native Electron backend for real ping, traceroute, and port scanning.
Network engineers stitch together a dozen disconnected utilities for routine work: subnetting, VLSM planning, config generation, DNS lookups, conflict detection. Netdash folds 40+ of them into one privacy-first app that runs in the browser or as a native desktop build.
The hard part is correctness. The IP math is RFC-correct, not approximate: bitwise IPv4 subnetting with RFC 3021 /31 point-to-point handling, IPv6 expansion with longest-run zero compression and solicited-node multicast derivation, CIDR summarization with boundary alignment, and a first-fit-descending VLSM allocator that reports utilization and slack.
The DNS engine speaks DNS-over-HTTPS to five providers, parsing both JSON and dns-message wire formats, with a TTL-aware LRU cache and DNSSEC AD-flag checks. RTT testing uses the Performance API for median, p95, and jitter.
Browsers can't send raw ICMP, so the Electron build adds a Node.js backend behind a context-isolated IPC bridge, with hostname and port validation that blocks command injection before any shell call. Firestore rules enforce owner/editor/admin tiers and bar collaborators from changing ownership.
- RFC-correct IP math: RFC 3021 /31 subnetting, IPv6 zero-compression, CIDR summarization, first-fit-descending VLSM
- DNS-over-HTTPS to 5 providers, JSON and wire-format parsing, TTL-aware LRU cache, DNSSEC AD-flag checks
- Native Electron backend over a context-isolated IPC bridge for real ICMP ping, traceroute, and port scans
- Hostname and port validation that blocks command injection before any shell call
- Firestore owner/editor/admin tiers; Cisco IOS and Aruba CX config generation; WCAG 2.2 AA
- TypeScript
- Next.js
- React
- Electron
- Node.js
- Firebase
- Tailwind CSS
- DNS-over-HTTPS