A collection of tools for Azure administrators and developers: IP lookups, RBAC calculators, subnet planning, and tenant discovery.
Live site: azurehub.org
Features
- IP Lookup - Check if an IP belongs to Azure and which services use it
- Service Tags - Browse Azure service tags and their IP ranges
- IP Changes - Track modifications to Azure IP ranges between updates
- Tenant Discovery - Look up Entra ID tenant information by domain
- Subnet Calculator - Plan VNet subnets with visual splitting and export to Excel/CSV
- RBAC Calculator - Find least-privilege Azure roles for required permissions
- Entra ID Roles - Analyze Entra ID administrative role permissions
- Custom Role Creator - Build custom RBAC role definitions
- Private DNS Zones - Look up Azure Private Endpoint DNS zone configurations
- VM Pricing - Look up and compare Azure VM prices and specs by region, vCPU, memory, and commitment term, in 40+ currencies, with a per-size page showing the cheapest regions
- Guides - Azure guides and tutorials
Running Locally
git clone https://github.com/endgor/azure-hub.git
cd azure-hub
npm install
npm run update-ip-data
npm run update-rbac-data
npm run dev
Open http://localhost:3000
Optional: Entra ID Features
Tenant Lookup requires an Azure App Registration with:
CrossTenantInformation.ReadBasic.All (Microsoft Graph)
Entra ID Roles requires:
RoleManagement.Read.Directory (Microsoft Graph)
Add credentials to .env.local:
AZURE_TENANT_ID=your-tenant-id
AZURE_CLIENT_ID=your-client-id
AZURE_CLIENT_SECRET=your-client-secret
Then run: npm run fetch-entraid-roles
Commands
npm run dev - Development servernpm run build - Production buildnpm run preview - Preview the app in the Cloudflare Workers runtimenpm run deploy - Deploy the production Worker to Cloudflarenpm run deploy:preview - Deploy the preview Worker to Cloudflarenpm run update-ip-data - Refresh Azure IP rangesnpm run update-rbac-data - Refresh RBAC datanpm run fetch-entraid-roles - Fetch Entra ID roles (requires credentials)npm run update-private-dns-zones - Refresh Private DNS zone datanpm run update-vm-pricing - Refresh Azure VM retail pricesnpm run update-vm-specs - Refresh VM SKU specs (requires Azure CLI login)
Tech Stack
Next.js 15, React 19, TypeScript, Tailwind CSS
Cloudflare Deployment
This repository is configured to deploy to Cloudflare Workers using OpenNext.
GitHub Actions deploys:
main to the production Workercodex/cloudflare-migration to the preview Worker
Required GitHub secrets:
CLOUDFLARE_API_TOKENCLOUDFLARE_ACCOUNT_ID
Runtime secrets such as AZURE_CLIENT_ID, AZURE_CLIENT_SECRET, AZURE_TENANT_ID, RESEND_API_KEY, and INDEXNOW_SECRET should be configured in Cloudflare for each Worker environment before go-live.
Data Sources
Disclaimer
This project is not affiliated with Microsoft Corporation. Azure, Entra ID, and Microsoft Graph are trademarks of Microsoft Corporation. Use at your own risk.
License
MIT
