IP Address Management
without the complexity
A lightweight, self-hosted IPAM built with PHP 8.2+ and SQLite — or MySQL/MariaDB/PostgreSQL. No npm, no build step, no enterprise price tag.
Everything you need, nothing you don't
Built for small to mid-sized environments that need subnet and address tracking without enterprise complexity.
Subnet & Address Management
IPv4 and IPv6 subnets with CIDR validation, parent/child hierarchy, overlap detection, and binary IP storage for correct sort order. Reusable owner records via the Contacts typeahead.
Network Scanning
Per-subnet ICMP and TCP scan schedules with configurable intervals, stale address detection, ARP import, and scan history timeline.
Utilization History
Daily snapshots with inline SVG sparklines on the dashboard. Full trend history in Admin → Reports with per-subnet drill-down and CSV export.
Multiple Databases
SQLite out of the box — or opt into MySQL 8.0+, MariaDB 10.11+, or PostgreSQL 14+. CLI migration tool for all six direction pairs.
Security & Access Control
RBAC (admin/readonly), OIDC SSO with PKCE, CSRF protection, rate-limited login, append-only audit log, and secure session cookies. Sensitive settings — SMTP password, OIDC client secret, reCAPTCHA Enterprise key, login-protection and webhook signing secrets — are encrypted at rest as IPAMSEC1 libsodium envelopes keyed off app_secret, so a stolen database dump yields ciphertext only.
REST API + OpenAPI Spec
Bearer-token authenticated JSON API covering subnets, addresses, sites, VLANs, VRFs, contacts, devices, audit log, and utilization snapshots. Machine-readable OpenAPI 3.1 spec at ?resource=spec.
Sites, VLANs & VRFs
First-class organisation objects. Sites support region hierarchy. VLANs have ranges. VRFs scope subnets with Route Distinguisher and BGP ASN.
SMTP Alerting & Password Recovery
PHPMailer-powered utilization alerts, email-based password recovery, and email change verification — all through your existing SMTP relay.
Device & Interface Tracking
Link IP addresses to named devices and interfaces. Manage routers, switches, servers, firewalls, and VMs — with full CRUD, device search, and CSV import support.
DHCP Config Export
Generate server-ready dhcpd.conf or Kea 2.x JSON from your subnet data. Set routers, DNS, lease times, and PXE options per-subnet. Reserved addresses with MACs become host reservations automatically.
Outbound Webhooks
Fire HMAC-signed HTTP callbacks on address and subnet changes. Delivery log, automatic retry, and SSRF protection built in. Integrate with Slack, PagerDuty, or your own automation.
Encrypted backups, three ways
Unified admin surface for scheduled and on-demand backups to S3-compatible, SFTP, or local destinations. IPAMBKP3 ships three encryption modes: stored (server-managed key, hands-free), transitory (operator passphrase via Argon2id, server never persists it), and unencrypted (integrity-only) — picked per backup. Streaming AES-256-CTR + HMAC-SHA256, GFS retention, per-schedule notifications, and a phase-locked restore wizard with dry-run preview and manual upload-and-restore for archives that didn't come from a configured destination. Backwards-compatible with IPAMBKP1/2 archives. Backup guide · Restore guide
Operational Health Dashboard
Admin-only dashboard with color-coded status indicators across database, backups, scanning, webhooks, auth/security, and system metrics. 60-second cache with manual refresh for fast load on large installs.
Sidebar Navigation & Command Palette
Persistent sidebar with SVG Heroicons on desktop, slide-in overlay on mobile, and a ⌘K / Ctrl+K command palette for keyboard-driven navigation and record creation from any page.
Global Drawer & KPI Dashboard
Slide-in right drawer for subnet, address, and user forms — with focus trap and loading skeleton. Dashboard shows five at-a-glance KPI cards plus a 30-day address-growth sparkline powered by uPlot.
Deploy in minutes
Extract, point your web server, open the browser. No build tools, no package managers on the target server.
Download & extract
tar -xzf ipam-3.36.1.tar.gz -C /var/www/html/Point your web server
Set document root to Simple-PHP-IPAM/. Apache, nginx, Caddy, and OpenLiteSpeed configs are in the install guide.
Open in browser
Bootstrap admin account is created on first load. Log in and configure settings at Admin → Settings.
Requirements
pdo, openssl, plus one of pdo_sqlite, pdo_mysql, or pdo_pgsql