Netdash

Network engineers stitch together a dozen disconnected utilities for routine work: subnetting, VLSM planning, config generation, DNS lookups, conflict detection. Netdash folds 40+ of them into one privacy-first app that runs in the browser or as a native desktop build.

The hard part is correctness. The IP math is RFC-correct, not approximate: bitwise IPv4 subnetting with RFC 3021 /31 point-to-point handling, IPv6 expansion with longest-run zero compression and solicited-node multicast derivation, CIDR summarization with boundary alignment, and a first-fit-descending VLSM allocator that reports utilization and slack.

The DNS engine speaks DNS-over-HTTPS to five providers, parsing both JSON and dns-message wire formats, with a TTL-aware LRU cache and DNSSEC AD-flag checks. RTT testing uses the Performance API for median, p95, and jitter.

Browsers can't send raw ICMP, so the Electron build adds a Node.js backend behind a context-isolated IPC bridge, with hostname and port validation that blocks command injection before any shell call. Firestore rules enforce owner/editor/admin tiers and bar collaborators from changing ownership.