Azure IPAM

Azure IPAM is a free, open-source address-management tool for teams working in a single Azure tenant. Its strongest case is combining Azure network discovery with subnet planning and API-driven workflows; the main trade-offs are demanding deployment permissions and separate Azure hosting costs.

Overview

The tool discovers networks, subnets, and endpoints across an Azure tenant, and can surface orphaned endpoints and misconfigured virtual network peers. That makes it useful not only for planning new allocations but also for spotting existing network issues.

Teams can group networks into Spaces and Blocks, track IP and CIDR consumption, and map external networks to Azure CIDR ranges. This organization helps connect Azure address planning to external ranges, though the project is designed with a single tenant in mind. Multi-tenant support is under assessment, so organizations managing multiple tenants should look elsewhere for a shared IPAM environment.

Key features

Discovery and planning

Azure Resource Graph gathers networking resources and their states for the Python backend, which uses FastAPI. Planning tools show how many subnets of a chosen mask fit within a CIDR block. Together, discovery and planning give Azure-focused teams a practical way to understand current allocations before reserving more space.

Automation and deployment

A REST API supports infrastructure-as-code and CI/CD workflows. The documentation describes reserving CIDR blocks through ARM and Bicep templates, Terraform, and CI/CD pipelines, making the tool a fit for teams that want address management connected to deployment processes rather than handled only by hand.

Azure IPAM can run as a container in Azure App Service or Azure Functions, and it can be deployed API-only without a UI. Its supporting infrastructure runs in the customer’s Azure tenant; resources are not shared with other IPAM users except for the public container registry. The architecture uses Azure app registrations for authentication and Azure Key Vault for credentials and tenant-related identifiers. This keeps the supporting setup within the customer’s environment, but also means the customer must provision and operate it.

Pricing

The Azure IPAM plan costs free and is an open-source project. It includes subnet planning and API access, with no paid tier or trial. Azure infrastructure and hosting costs are separate, so the software’s free price does not make the deployment cost-free.

There are no published seat or usage caps for the plan. The more consequential cost is operational: deployment prerequisites include an Azure subscription, subscription-level Owner access, Root Management Group permissions, and Global Administrator consent for app registration API permissions. Teams unable to grant that level of access may find setup impractical even at no software charge.

Platforms

Azure IPAM supports API, Linux, self-hosted, web, and Windows environments. Its cloud deployment model and container options suit teams already operating Azure infrastructure; an API-only deployment is available for teams that do not need a user interface.

Who it's for

Azure IPAM is best suited to teams responsible for address planning in one Azure tenant, particularly those that want to track CIDR consumption, discover existing resources, and reserve ranges through infrastructure-as-code or CI/CD. It is less suitable for service providers and organizations that need one system to manage multiple tenants, or for teams that cannot meet its Azure permission prerequisites.

Pros and cons

Pros

• Azure-focused discovery: It inventories networks, subnets, and endpoints and can highlight orphaned endpoints and misconfigured peers.
• Useful planning and organization: Spaces, Blocks, consumption tracking, external-range mapping, and subnet-mask planning support a more structured allocation process.
• Automation options: The REST API and documented ARM, Bicep, Terraform, and CI/CD paths can fit address reservations into existing deployment workflows.
• Open source with no software charge: The plan costs nothing, though Azure infrastructure and hosting remain the customer’s expense.

Cons

• Single-tenant design: Multi-tenant support is under assessment, which limits its fit for organizations managing several Azure tenants.
• High deployment permissions: Owner access, Root Management Group permissions, and Global Administrator consent are prerequisites that may be difficult to approve.
• Customer-managed infrastructure: Hosting runs in the customer’s Azure tenant, bringing separate infrastructure costs and operational responsibility.
• Limited support channels: Support is through the documentation and GitHub issues; vulnerability reports must go to the Microsoft Security Response Center rather than public issues.

Alternatives

ManageEngine OpUtils is worth considering for teams that need a broader platform footprint, including Android and iOS, or want a free tier limited to one Class C subnet, one switch, and basic IP and network scanning. Its Professional plan is priced on request.

Subnetly may suit teams seeking a freemium option across API, iOS, Linux, web, and Windows, with a free monthly tier capped at 256 IPAM addresses, 10 subnets, two DHCP pools, one private DNS zone, and one public DNS zone.

Tidal LightMesh offers a free plan for one user and fewer than 1,000 IPs, with unlimited subnets, basic IPAM, and DHCP discovery. Choose it when that defined free allowance suits better than Azure IPAM’s Azure-specific, single-tenant approach; its Pro monthly plan costs $35 a month.

GestióIP is another freemium option, with free IPAM software and a standard package; its Configuration Management Module for up to 50 devices costs $400 a year.

.NET is an alternative with a free plan for up to 1,000 nodes and subscription-based billing for some Azure Virtual Network Manager instances.

IPplan is a free, GPL-licensed self-hosted web application. NIPAP is a free, open-source option under the MIT license. OpenNetAdmin is a free open-source IPAM system with no paid plans or usage limits stated.

Browse more options in IP Address Management Software.

Verdict

Choose Azure IPAM if your team manages a single Azure tenant and wants discovery, address planning, and API-based allocation workflows without a software license fee. Its Azure-specific inventory and automation are compelling for that job. Look elsewhere if you need multi-tenant management, cannot grant the required Azure permissions, or want a hosted service without separate infrastructure costs.