New: draw a network as text and trace a packet through it hop by hop.Open the routing simulator
Local-first

Network engineering tools that run entirely in your browser

Paste a network diagram, an address plan or a device configuration. Every calculation happens in this tab — there is no NetKit server to upload it to, and the tools keep working with no network at all.

Browse the tools
24
tools
6
categories
0
network calls
  • No accounts, no uploads
  • Installs as an app, works offline
  • Every tool declares whether it uses the network

The pages carry Google’s advertising script, which funds the site. It is not part of the tools, and it is not given anything you type — what it does and does not see.

netkit://local — 172.16.40.0/22 — computed here
Network
172.16.40.0/22
Usable range
172.16.40.1 – 172.16.43.254
Netmask
255.255.252.0
Wildcard
0.0.3.255
Usable hosts
1,022
Addresses in block
1,024
Reverse zone
0.40.16.172.in-addr.arpa
Scope
Private (RFC 1918)

Also a native app

NetSmith carries 34 tools on the phone — the same kernel, no account, one-time purchase.

It adds the three things a browser tab cannot do: the camera, for asset and serial stocktakes; real ICMP ping and traceroute from the phone you are actually standing in front of; and the live probes — DNS against any server, HTTP timing, TLS certificates and TCP port scans.

The tools

24 calculators, converters and references. No account, no upload.

Every one of them runs from the same kernel, in this tab, with no request of its own. Press ⌘K to search by name, keyword or pinyin initials.

10 tools

IP Addressing & Routing

Subnetting, VLSM planning, route summarization, IPv6 and address arithmetic.

Nothing here needs an account, and the tools run without the network.

The whole toolkit is a static site with a service worker, so one visit is enough to make the tools work offline — on a laptop in a datacenter, on a phone with no signal. There is no NetKit server to be down and no upload of your input to be intercepted, because the tools have nothing to upload. The advertising script each page loads is the one third-party exception, and it is written down on the privacy page rather than implied away here.