在PHP中从CIDR表示法中获取IP列表

23

是否有一种方法(或函数/类)可以从CIDR表示法中获取IP地址列表?

例如,我有一个CIDR为73.35.143.32/27的表示法,想要获取此表示法中所有IP地址的列表。 有什么建议吗?

谢谢。


请参考以下链接中的内容:在PHP5中如何将IP匹配到CIDR掩码? - Distdev
15个回答

39

我会编辑上述 类别,添加一个方法来实现此功能。以下是我编写的代码,可能会在那之前帮到你。

function cidrToRange($cidr) {
  $range = array();
  $cidr = explode('/', $cidr);
  $range[0] = long2ip((ip2long($cidr[0])) & ((-1 << (32 - (int)$cidr[1]))));
  $range[1] = long2ip((ip2long($range[0])) + pow(2, (32 - (int)$cidr[1])) - 1);
  return $range;
}
var_dump(cidrToRange("73.35.143.32/27"));

//////////////////OUTPUT////////////////////////
// array(2) {
//   [0]=>
//   string(12) "73.35.143.32"
//   [1]=>
//   string(12) "73.35.143.63"
// }
/////////////////////////////////////////////////

将IP范围的低端作为数组中的第一个条目返回,然后将高端作为第二个条目返回。


我编辑了 CIDR 类,添加了一个能够给你想要的结果的方法。我认为你也可能需要看一下 IPisWithinRange() 方法。 - jonavon
2
我不明白这怎么是正确答案。原帖要求“以此表示法列出所有IP地址的列表”,而这个函数只提取了低+高端。 - Dr. Gianluigi Zane Zanettini
1
它回答了问题,Dr.GZZ,因为它提供了范围的低端和高端,这样任何人都可以知道中间的内容。返回完整的IP数组既不切实际,也可能会因低子网掩码而轻易崩溃PHP。 - IncredibleHat

10

这实际上是一个位掩码 - 73.35.143.32/27 表示有27个比特位是网络掩码,其余的可以用于为网络中的节点分配:

73.35.143.32

二进制表示为(为了易读性显示点):

01001001.00100011.10001111.00100000

子网掩码为27位:

11111111.11111111.11111111.11100000

那么你只需要将它们进行逻辑与操作即可得到:

01001001.00100011.10001111.001 00000
 network prefix (27 bits)     | node address (5 bits)

从这里开始,您只需在节点地址中枚举所有组合(00000为0,11111为31,所以简单的循环就足够了),然后您将拥有所有可用的主机。

将此伪代码转换为PHP留给读者练习 ;)

哦,还有义务的弃用警告:IPv4现在已满,请考虑使用IPv6。


1
如果您不打算包括网络地址和广播地址,请确保排除0(网络地址)和31(广播地址)。 - Tony L.

8

这里有一个快速的64位函数来完成此操作,请注释掉您不需要的返回行。接受任何有效的Ipv4地址,无论是否带有有效的CIDR路由前缀,例如63.161.156.0/24或63.161.156.0。

<?php
function cidr2range($ipv4){
if ($ip=strpos($ipv4,'/'))
{$n_ip=(1<<(32-substr($ipv4,1+$ip)))-1;   $ip_dec=ip2long(substr($ipv4,0,$ip)); }
else
{$n_ip=0;                                   $ip_dec=ip2long($ipv4);             }
$ip_min=$ip_dec&~$n_ip;
$ip_max=$ip_min+$n_ip;
#Array(2) of Decimal Values Range
return [$ip_min,$ip_max];
#Array(2) of Ipv4 Human Readable Range
return [long2ip($ip_min),long2ip($ip_max)];
#Array(2) of Ipv4 and Subnet Range
return [long2ip($ip_min),long2ip(~$n_ip)];
#Array(2) of Ipv4 and Wildcard Bits
return [long2ip($ip_min),long2ip($n_ip)];
#Integer Number of Ipv4 in Range
return ++$n_ip;
}

为了提高运行速度,该函数不会检查输入,但正式上来说,输入应该是与以下正则表达式匹配的字符串。
#^(?:((?:0)|(?:2(?:(?:[0-4][0-9])|(?:5[0-5])))|(?:1?[0-9]{1,2}))\.((?:0)|(?:2(?:(?:[0-4][0-9])|(?:5[0-5])))|(?:1?[0-9]{1,2}))\.((?:0)|(?:2(?:(?:[0-4][0-9])|(?:5[0-5])))|(?:1?[0-9]{1,2}))\.((?:0)|(?:2(?:(?:[0-4][0-9])|(?:5[0-5])))|(?:1?[0-9]{1,2}))(?:/((?:(?:0)|(?:3[0-2])|(?:[1-2]?[0-9]))))?)$#

如果你想在使用函数之前验证输入

<?php
if (is_string($ipv4) && preg_match('#^(?:((?:0)|(?:2(?:(?:[0-4][0-9])|(?:5[0-5])))|(?:1?[0-9]{1,2}))\.((?:0)|(?:2(?:(?:[0-4][0-9])|(?:5[0-5])))|(?:1?[0-9]{1,2}))\.((?:0)|(?:2(?:(?:[0-4][0-9])|(?:5[0-5])))|(?:1?[0-9]{1,2}))\.((?:0)|(?:2(?:(?:[0-4][0-9])|(?:5[0-5])))|(?:1?[0-9]{1,2}))(?:/((?:(?:0)|(?:3[0-2])|(?:[1-2]?[0-9]))))?)$#',$ipv4))
{
#This is a valid ipv4 with or without CIDR Routing Prefix
$result=cidr2range($ipv4);
print_r($result);
}

要获取给定IP地址的完整范围(带有或不带有CIDR路由前缀)作为数组,您可以使用以下代码,但要注意,例如25.25.25.25/16返回一个具有65536个元素的数组,您可能会因为使用较小的路由前缀而很容易耗尽内存。

<?php
$result=cidr2range($ipv4);
for($ip_dec=$result[0];$ip_dec<=$result[1];$ip_dec++)
$full_range[$ip_dec]=long2ip($ip_dec);
print_r($full_range);

为了快速检查给定的IPv4地址是否与给定的CIDR匹配,您可以像此示例中的内联方式一样进行操作。
<?php
$given_cidr='55.55.55.0/24';
$given_ipv4='55.55.55.55';
if(($range=cidr2range($given_cidr)) &&
($check=ip2long($given_ipv4))!==false &&
$check>=$range[0] && $check<=$range[1])
{
echo 'Yes, '.$given_ipv4.' is included in '.$given_cidr;
}
else
{
echo 'No, '.$given_ipv4.' is not included in '.$given_cidr;
}

要快速检查给定的IPv4是否与给定的IP数组匹配(带或不带CIDR路由前缀)

<?php
#This code is checking if a given ip belongs to googlebot
$given_ipv4='74.125.61.208';
$given_cidr_array=['108.59.93.43/32','108.59.93.40/31','108.59.93.44/30','108.59.93.32/29','108.59.93.48/28','108.59.93.0/27','108.59.93.64/26','108.59.93.192/26','108.59.92.192/27','108.59.92.128/26','108.59.92.96/27','108.59.92.0/27','108.59.94.208/29','108.59.94.192/28','108.59.94.240/28','108.59.94.128/26','108.59.94.16/29','108.59.94.0/28','108.59.94.32/27','108.59.94.64/26','108.59.95.0/24','108.59.88.0/22','108.59.81.0/27','108.59.80.0/24','108.59.82.0/23','108.59.84.0/22','108.170.217.128/28','108.170.217.160/27','108.170.217.192/26','108.170.217.0/25','108.170.216.0/24','108.170.218.0/23','108.170.220.0/22','108.170.208.0/21','108.170.192.0/20','108.170.224.0/19','108.177.0.0/17','104.132.0.0/14','104.154.0.0/15','104.196.0.0/14','107.167.160.0/19','107.178.192.0/18','125.17.82.112/30','125.16.7.72/30','74.125.0.0/16','72.14.192.0/18','77.109.131.208/28','77.67.50.32/27','66.102.0.0/20','66.227.77.144/29','66.249.64.0/19','67.148.177.136/29','64.124.98.104/29','64.71.148.240/29','64.68.64.64/26','64.68.80.0/20','64.41.221.192/28','64.41.146.208/28','64.9.224.0/19','64.233.160.0/19','65.171.1.144/28','65.170.13.0/28','65.167.144.64/28','65.220.13.0/24','65.216.183.0/24','70.32.132.0/23','70.32.128.0/22','70.32.136.0/21','70.32.144.0/20','85.182.250.128/26','85.182.250.0/25','80.239.168.192/26','80.149.20.0/25','61.246.224.136/30','61.246.190.124/30','63.237.119.112/29','63.226.245.56/29','63.158.137.224/29','63.166.17.128/25','63.161.156.0/24','63.88.22.0/23','41.206.188.128/26','12.234.149.240/29','12.216.80.0/24','8.34.217.24/29','8.34.217.0/28','8.34.217.32/27','8.34.217.64/26','8.34.217.128/25','8.34.216.0/24','8.34.218.0/23','8.34.220.0/22','8.34.208.128/29','8.34.208.144/28','8.34.208.160/27','8.34.208.192/26','8.34.208.0/25','8.34.209.0/24','8.34.210.0/23','8.34.212.0/22','8.35.195.128/28','8.35.195.160/27','8.35.195.192/26','8.35.195.0/25','8.35.194.0/24','8.35.192.0/23','8.35.196.0/22','8.35.200.0/21','8.8.8.0/24','8.8.4.0/24','8.6.48.0/21','4.3.2.0/24','23.236.48.0/20','23.251.128.0/19','216.239.32.0/19','216.252.220.0/22','216.136.145.128/27','216.33.229.160/29','216.33.229.144/29','216.34.7.176/28','216.58.192.0/19','216.109.75.80/28','216.74.130.48/28','216.74.153.0/27','217.118.234.96/28','208.46.199.160/29','208.44.48.240/29','208.21.209.0/28','208.184.125.240/28','209.185.108.128/25','209.85.128.0/17','213.200.103.128/26','213.200.99.192/26','213.155.151.128/26','199.192.112.224/29','199.192.112.192/27','199.192.112.128/26','199.192.112.0/25','199.192.113.176/28','199.192.113.128/27','199.192.113.192/26','199.192.113.0/25','199.192.115.80/28','199.192.115.96/27','199.192.115.0/28','199.192.115.128/25','199.192.114.192/26','199.192.114.0/25','199.223.232.0/21','198.108.100.192/28','195.16.45.144/29','192.104.160.0/23','192.158.28.0/22','192.178.0.0/15','206.160.135.240/28','207.223.160.0/20','203.222.167.144/28','173.255.125.72/29','173.255.125.80/28','173.255.125.96/27','173.255.125.0/27','173.255.125.128/25','173.255.124.240/29','173.255.124.232/29','173.255.124.192/27','173.255.124.128/29','173.255.124.144/28','173.255.124.160/27','173.255.124.48/29','173.255.124.32/28','173.255.124.0/27','173.255.124.64/26','173.255.126.0/23','173.255.122.128/26','173.255.122.64/26','173.255.123.0/24','173.255.121.128/26','173.255.121.0/25','173.255.120.0/24','173.255.117.32/27','173.255.117.64/26','173.255.117.128/25','173.255.116.192/27','173.255.116.128/26','173.255.116.0/25','173.255.118.0/23','173.255.112.0/22','173.194.0.0/16','172.102.8.0/21','172.253.0.0/16','172.217.0.0/16','162.216.148.0/22','162.222.176.0/21','180.87.33.64/26','128.177.109.0/26','128.177.119.128/25','128.177.163.0/25','130.211.0.0/16','142.250.0.0/15','146.148.0.0/17'];
echo '<pre>';
$in_range=false;
if (($given_ipv4_dec=ip2long($given_ipv4))!==false)
{
foreach($given_cidr_array as $given_cidr){
if(($range=cidr2range($given_cidr)) &&
$given_ipv4_dec>=$range[0] && $given_ipv4_dec<=$range[1])
{
$in_range=true;
echo $given_ipv4.' matched '.$given_cidr.' ('.join(array_map('long2ip',$range),' - ').")\n";
}
}
}
echo $given_ipv4.' is probably'.($in_range?'':' not').' a Googlebot IP';

希望这几行能帮到你……

太棒了 - 这是一个恰当而全面的解释,谢谢。 - seb835
这看起来非常有帮助。感谢您的认真! - Sean the Bean
这个脚本的灵活性和选项非常棒。解决了我所有复杂的CIDR范围问题,并帮助我理解为什么我之前尝试的方法失败了。真是太大帮助了! - Eva Donaldson

5

有一个小问题 - 当有人输入IP前缀如:127.0.0.15/26时,此函数会返回错误的最后一个IP地址。在这个函数中,在第4行(从$range [1]...开始)将$cidr[0]改为$range[0] - 现在返回每个范围内的最后一个IP地址都是正确的。

function cidrToRange($cidr) {
  $range = array();
  $cidr = explode('/', $cidr);
  $range[0] = long2ip((ip2long($cidr[0])) & ((-1 << (32 - (int)$cidr[1]))));
  $range[1] = long2ip((ip2long($range[0])) + pow(2, (32 - (int)$cidr[1])) - 1);
  return $range;
}
var_dump(cidrToRange("127.0.0.15/26"));

修复之前:

array(2) {
  [0]=>
  string(9) "127.0.0.0"
  [1]=>
  string(10) "127.0.0.78"
}
string(41) "127.0.0.15/26 >> 2130706432 -> 2130706510"

修复后:

array(2) {
  [0]=>
  string(9) "127.0.0.0"
  [1]=>
  string(10) "127.0.0.63"
}
string(41) "127.0.0.15/26 >> 2130706432 -> 2130706495"

1
这是正确的代码,如果我们使用此示例检查上面接受的代码,它将无法工作。110.143.0.55/16。谢谢Flip :) - Rizwan Ranjha
1
这是正确的解决方案。修改了已接受的解决方案以避免漏洞传播。 - Toto

4
强烈推荐这个PHP库:https://github.com/S1lentium/IPTools。它能够轻松地操作网络,提供许多功能。例如,可以遍历网络IP地址:
$network = Network::parse('192.168.1.0/24');
foreach($network as $ip) {
    echo (string)$ip . PHP_EOL;
}

// output:
192.168.1.0
...
192.168.1.255

3

我想到了一个更好的主意。

$ip_from= long2ip(ip2long($ip)& (-1<<(32-$net_mask)));
$ip_to= long2ip(ip2long($ip)| (~(-1<<(32-$net_mask))));

提示:$ip是类似60.12.34.5的ipv4地址;$net_mask是25这样的整数掩码。

由于位移操作,它非常快速。


2
这���返回一个IP地址数组:
function get_list_ip($ip_addr_cidr){
    $ip_arr = explode("/", $ip_addr_cidr);    
    $bin = "";

    for($i=1;$i<=32;$i++) {
        $bin .= $ip_arr[1] >= $i ? '1' : '0';
    }

    $ip_arr[1] = bindec($bin);

    $ip = ip2long($ip_arr[0]);
    $nm = $ip_arr[1];
    $nw = ($ip & $nm);
    $bc = $nw | ~$nm;
    $bc_long = ip2long(long2ip($bc));

    for($zm=1;($nw + $zm)<=($bc_long - 1);$zm++)
    {
        $ret[]=long2ip($nw + $zm);
    }
    return $ret;
}

2

@jonavon的回答进行扩展。如果您需要IP地址的平面列表,您可以按照以下方式转换他的函数。

function cidrToRange($value) {
    $range = array();
    $split = explode('/', $value);
    if (!empty($split[0]) && is_scalar($split[1]) && filter_var($split[0], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
        $rangeStart = ip2long($split[0]) & ((-1 << (32 - (int)$split[1])));
        $rangeEnd = ip2long($split[0]) + pow(2, (32 - (int)$split[1])) - 1;

        for ($i = $rangeStart; $i <= $rangeEnd; $i++) {
            $range[] = long2ip($i);
        }
        return $range;
    } else {
        return $value;
    }
}

谢谢,但为了避免原始函数中所讨论的错误,需要调整2行代码: $rangeStartIP = long2ip($rangeStart); $rangeEnd = ip2long($rangeStartIP) + pow(2, (32 - (int)$split[1])) - 1; - OwN

1

我不相信这个类会返回一个IP列表,但它确实提供了一些有用的方法来处理CIDR块。


很遗憾,目前这个答案无用,因为你的链接已经失效(“未找到片段”)。请更新。 - Sean the Bean

0

PHP函数cidrl()使用匿名函数迭代CIDR块中的每个IP地址:

cidrl('194.168.0.1/28', $error_code, function($address) {
    print "$address\n";
});

或者,作为一个数组:

$addresses = cidrl('194.168.0.1/28', $error_code);

可以通过 Composer 从 Packagist emden-norfolk/cidrl 进行安装:

composer require emden-norfolk/cidrl

(注意:此软件包已不再受支持,推荐使用我在另一个答案中提到的 cidrl 命令。)


网页内容由stack overflow 提供, 点击上面的
可以查看英文原文,
原文链接