Tool to clean up your acl

I just wanted to share a cidr-merger tool I have found that merges your ip addresses. I did not test it fully but it is worth looking at. From 2371 addresses of the amazon cloud to 888.

[@ ~]$ cat amazon-cloud.json | jq -r .prefixes[].ip_prefix| wc -l
3819
[@ ~]$ cat amazon-cloud.json | jq -r .prefixes[].ip_prefix| sort -u | wc -l
2871
[@ ~]$ cat amazon-cloud.json | jq -r .prefixes[].ip_prefix| sort -u | tr '\n' ' ' | ./cidr-merger - | wc -l
888


[@ ~]$ cat google-cloud.json | jq -r .prefixes[].ipv4Prefix | wc -l
388
[@ ~]$ cat google-cloud.json | jq -r .prefixes[].ipv4Prefix | sort -u | wc -l
384
[@ ~]$ cat google-cloud.json | jq -r .prefixes[].ipv4Prefix | sort -u | tr '\n' ' ' | ./cidr-merger - | wc -l
invalid ip/CIDR address/range: null
176


[@ ~]$ cat microsoft.json | jq -r .values[].properties.addressPrefixes[] | grep -v ':' | wc -l
31683
[@ ~]$ cat microsoft.json | jq -r .values[].properties.addressPrefixes[] | grep -v ':' | sort -u | wc -l
17338
[@ ~]$ cat microsoft.json | jq -r .values[].properties.addressPrefixes[] | grep -v ':' | sort -u |  tr '\n' ' ' | ./cidr-merger - | wc -l
1842
1 Like

A python alternative is: