Category
VPN & Overlay
WireGuard, Tailscale, IPsec, and Cloudflare helpers for overlay and edge networks.
Cloudflare CIDR Helper
Aggregate an IP list and expand it into the prefix lengths Cloudflare IP Access Rules accept, without widening any prefix, plus a ready ip.src expression.
Cloudflare WAF Expression Builder
Build a Cloudflare Ruleset Engine filter expression from typed conditions, with per-field operators, correct string quoting, and starts_with/ends_with as functions.
IPsec Subnet Helper
Turn local and remote subnet lists into IPsec traffic selectors, count the resulting selector combinations, and flag overlaps, one-sided address families, and redundant entries.
Tailscale Grants Matrix
Turn a Tailscale policy's grants into a source-to-destination matrix, unioning the ip and app capabilities that several rules give the same pair.
Tailscale Policy Visualizer
Expand a Tailscale ACL policy file into a rule-by-rule table with group members resolved, destinations split into host and ports, and undefined references surfaced.
WireGuard AllowedIPs Calculator
Subtract your LAN or other CIDRs from 0.0.0.0/0, ::/0 or any range to get the minimal WireGuard AllowedIPs for IPv4 and IPv6, ready to copy as an AllowedIPs = line.
WireGuard Config Helper
Build a wg-quick [Interface] and [Peer] configuration from validated fields, with key shape, endpoint, AllowedIPs, MTU, and keepalive checks.