CIDR reference · IPv4

The /28 CIDR block

16 addresses, 14 usable, subnet mask 255.255.255.240.

/28 · 255.255.255.240 Open in the calculator

16 addresses, 14 usable (11 in AWS after its five reserved addresses). The smallest subnet AWS allows. Used for tiny subnets such as bastion hosts, VPN endpoints or transit-gateway attachments.

Key numbers

Prefix length/28 (28 network bits, 4 host bits)
Subnet mask255.255.255.240
Mask in binary11111111.11111111.11111111.11110000
Wildcard mask0.0.0.15
Total addresses16
Usable hosts14 (total minus network and broadcast)
Fits in a /2416 times
Block sizeIncrements of 16 in octet 4

Example ranges

Private (RFC 1918) blocks of this size. Click one to open it in the calculator.

BlockFirst addressLast addressUsable hosts
10.0.0.0/2810.0.0.010.0.0.1510.0.0.1 – 10.0.0.14
172.16.0.0/28172.16.0.0172.16.0.15172.16.0.1 – 172.16.0.14
192.168.0.0/28192.168.0.0192.168.0.15192.168.0.1 – 192.168.0.14

Usable addresses in the cloud

Cloud providers reserve a few addresses in every subnet for the router, DNS and future use, so the usable count is lower than the formula gives.

ProviderUsable in a /28Notes
AWS VPC subnet11Allowed (/16 to /28). AWS reserves the first four addresses and the last one.
Azure virtual network subnet11Allowed. Azure reserves the first four addresses and the last one.
Google Cloud subnet12Allowed. Google Cloud reserves the first two and the last two addresses.

How the numbers are derived

An IPv4 address has 32 bits. A /28 uses 28 of them for the network, leaving 4 host bits, so the block has 24 = 16 addresses. The first address (all host bits 0) is the network address and the last (all host bits 1) is the broadcast address, which leaves 14 for hosts. The subnet mask is 28 ones followed by 4 zeros, written in dotted decimal as 255.255.255.240; the wildcard mask 0.0.0.15 is its inverse, used in Cisco ACLs and OSPF configuration.

FAQ

How many hosts can a /28 have?

16 addresses in total, of which 14 are usable after removing the network and broadcast addresses. Cloud providers reserve a few more: 11 usable in AWS and Azure, 12 in Google Cloud.

How many /28 subnets fit in a /24?

16. A /24 has 256 addresses and a /28 has 16, so 256 ÷ 16 = 16 blocks.