OpenIPAM
github.com
What it is
OpenIPAM is a free, open-source IP address management and CMDB tool for network and infrastructure inventory. It manages CIDR subnets, IP assignments and reservations, duplicate-IP conflicts, VLANs, IP ranges, and subnet calculations. DHCP tracking covers scopes, leases, reservations, options, and utilization. Its inventory supports 14 host types, hardware lifecycle tracking, locations and racks, maintenance windows, and company records. It can run in a browser with local storage or use an optional Python Flask backend with server-side SQLite for multi-user access. Server mode adds SAML 2.0 single sign-on with Microsoft Entra ID, authenticated routes, and a REST API for entity management, cross-entity search, dashboard statistics, and JSON backup or import. The project describes signed session cookies with an eight-hour lifetime and user-attributed audit entries. CSV host import and JSON backup and restore, including DHCP data, are supported. Browser-mode data stays in the browser; server-mode data is stored in the server-side SQLite file. The plan costs nothing. Current browser support covers Chrome, Firefox, Safari, and Edge, with WebAssembly and ES6+ required.
Spec sheet
- What it does
- OpenIPAM is an open-source browser-based IP address management and configuration management database tool.Read 15 Oct 2026 · github.com
- Purpose
- OpenIPAM is an open-source IP address management and CMDB tool for managing network and infrastructure inventory.Read 7 Oct 2026 · github.com
- Intended users
- The README names homelabs, small businesses, network engineers, and IT departments as intended users.Read 7 Oct 2026 · github.com
- Deployment
- The browser version can be opened from downloaded files, and the repository includes a Linux setup script for its optional backend.Read 7 Oct 2026 · github.com
- API
- Server mode provides a REST API with CRUD endpoints for entities, cross-entity search, dashboard statistics, and JSON backup or import.Read 7 Oct 2026 · github.com
- API authentication
- The server code allows health and authentication routes without a session and gates other API routes behind login and role checks.Read 15 Oct 2026 · github.com
- Audit history
- Create, update, and delete operations are logged with old and new values, and IP assignment history is retained.Read 15 Oct 2026 · github.com
- Authentication
- Server mode supports SAML 2.0 single sign-on with Microsoft Entra ID and requires authentication for routes.Read 7 Oct 2026 · github.com
- Backups and import
- It supports CSV host import and JSON database backup and restore, including DHCP data.Read 7 Oct 2026 · github.com
- Browser requirements
- Supported browsers are the latest two versions of Chrome, Firefox, Safari, and Edge with WebAssembly and ES6 support.Read 15 Oct 2026 · github.com
- Browser support
- The project lists current two-version support for Chrome, Firefox, Safari, and Edge and requires WebAssembly and ES6+ support.Read 7 Oct 2026 · github.com
- CMDB
- The inventory supports 14 host types, hardware lifecycle tracking, locations and racks, maintenance windows, and company records.Read 7 Oct 2026 · github.com
- CMDB host types
- The inventory supports 14 host categories such as virtual machines, physical systems, containers, firewalls, routers, switches, databases, and printers.Read 15 Oct 2026 · github.com
- Conflict detection
- The application flags duplicate addresses, subnet mismatches, and inappropriate network or broadcast addresses.Read 15 Oct 2026 · github.com
- Data privacy
- The README states that browser-mode data stays in the browser, while server mode stores data in a server-side SQLite file.Read 7 Oct 2026 · github.com
- Deployment modes
- It can run entirely in a browser or use a Python Flask backend for shared server access.Read 15 Oct 2026 · github.com
- DHCP
- It tracks DHCP scopes, leases, reservations, options, and utilization.Read 7 Oct 2026 · github.com
- DHCP management
- DHCP features cover scopes, leases, reservations, options, and visual utilization indicators.Read 15 Oct 2026 · github.com
- Hardware lifecycle
- Host records can track warranties, end-of-life dates, purchases, vendors, models, and asset tags.Read 15 Oct 2026 · github.com
- Import and backup
- The product imports and exports host CSV files and supports full JSON backup and restore.Read 15 Oct 2026 · github.com
- Installation requirements
- Linux setup requires Python 3, pip, a virtual environment, and the xmlsec development library for SAML; macOS setup uses Homebrew for libxmlsec1 and pkg-config.Read 15 Oct 2026 · github.com
- IP address management
- IP records include assignments, reservations, DNS names, and MAC addresses.Read 15 Oct 2026 · github.com
- Issue and pull-request status
- GitHub displays zero issues and zero pull requests for the repository.Read 15 Oct 2026 · github.com
- Known gaps
- The project lists role-based access control, DNS record management, topology visualization, and advanced reporting among areas where contributions are wanted.Read 7 Oct 2026 · github.com
- Licence
- The repository states that OpenIPAM is distributed under the MIT licence.Read 15 Oct 2026 · github.com
- Limit: DNS records
- The contribution list identifies forward and reverse DNS record management as an unfinished area.Read 15 Oct 2026 · github.com
- Limit: notifications
- Stale-IP detection and notification features for warranty expiry or IP exhaustion are listed as areas for contribution.Read 15 Oct 2026 · github.com
- Limit: reporting
- Advanced reporting, utilization trends, capacity forecasting, and PDF export are listed as requested contributions.Read 15 Oct 2026 · github.com
- Limit: topology visualization
- The contribution list identifies network topology visualization as an area still needing help.Read 15 Oct 2026 · github.com
- Local data storage
- Browser mode stores the SQLite database in WebAssembly and IndexedDB, while server mode stores it in SQLite on the server.Read 15 Oct 2026 · github.com
- Locations and racks
- Location management models datacenters, buildings, rooms, and racks with visual rack positioning.Read 15 Oct 2026 · github.com
- Maintenance scheduling
- Maintenance windows support eight types, impact levels, recurring schedules, and affected resources.Read 15 Oct 2026 · github.com
- Maker account
- The DonkeyXBT GitHub account shows three repositories, 65 stars, one follower, and 17 following accounts.Read 15 Oct 2026 · github.com
- Microsoft integration
- Server mode integrates with Microsoft Entra ID through SAML 2.0 single sign-on and single logout.Read 15 Oct 2026 · github.com
- Network management
- Features include CIDR subnets, IP assignment and reservations, duplicate-IP conflict detection, VLANs, IP ranges, and a subnet calculator.Read 7 Oct 2026 · github.com
- Offline operation
- The browser mode is designed to keep working without internet access after initial loading.Read 15 Oct 2026 · github.com
- Public API
- The backend exposes REST CRUD endpoints for companies, subnets, hosts, IPs, VLANs, ranges, locations, maintenance, templates, DHCP, settings, audit logs, backups, and search.Read 15 Oct 2026 · github.com
- Repository activity
- The repository's main branch page records an update on March 26, 2026.Read 15 Oct 2026 · github.com
- Repository popularity
- The repository page shows zero stars and zero forks.Read 15 Oct 2026 · github.com
- Repository releases
- GitHub currently shows no packaged releases for the repository.Read 15 Oct 2026 · github.com
- Route protection
- Unauthenticated API requests receive HTTP 401 responses and page requests are redirected to the login page.Read 15 Oct 2026 · github.com
- Scale claim
- The project says SQLite and IndexedDB can support thousands of hosts and hundreds of megabytes of data.Read 15 Oct 2026 · github.com
- Search and productivity
- Global search, keyboard shortcuts, context menus, saved filters, bulk edits, dark mode, and column customization are included.Read 15 Oct 2026 · github.com
- Security details
- The project describes signed session cookies with an 8-hour lifetime, HttpOnly, SameSite=Lax, and user-attributed audit entries.Read 7 Oct 2026 · github.com
- Session security
- The Flask backend configures HttpOnly, SameSite=Lax cookies with an eight-hour session lifetime.Read 15 Oct 2026 · github.com
- Storage modes
- It can run in a browser with local storage or use a Python Flask backend with server-side SQLite for multi-user access.Read 7 Oct 2026 · github.com
- Subnet management
- Subnets support CIDR configuration with gateway, DNS, VLAN, and company associations.Read 15 Oct 2026 · github.com
- Technology stack
- The project uses vanilla HTML, CSS, and JavaScript, sql.js WebAssembly, IndexedDB, Flask, flask-cors, SQLite, and python3-saml.Read 15 Oct 2026 · github.com
- VLAN management
- It includes nine VLAN classifications including data, voice, management, DMZ, guest, IoT, storage, backup, and native.Read 15 Oct 2026 · github.com
Plans and prices
Strong points and limits
Strong points
- Tracks IP, VLAN, and DHCP information
- Inventory supports 14 host types
- Browser-only and self-hosted deployment options
- Server mode includes SAML 2.0 and a REST API
Limits
- Browser mode stores data in the browser
- Server mode stores data in a SQLite file
- Role-based access control is a listed contribution gap
- Requires WebAssembly and ES6+ in the browser
Who it suits
OpenIPAM is aimed at homelabs, small businesses, network engineers, and IT departments managing address and infrastructure records. Browser-only use fits local storage, while server mode provides multi-user access and an API.
Verdict
OpenIPAM covers address management, DHCP tracking, and infrastructure inventory, with browser and server deployment paths. Check the listed contribution gaps, particularly role-based access control, DNS management, topology visualization, and advanced reporting, against your needs.
Where Specifiction places it
- Ipam Tool#4 of 188.4
- IP Address Management Software#10 of 438.3
- DHCP Management Software#7 of 258.2
- CMDB Software#16 of 398.4