IPAM (IP address management) is the system that keeps one authoritative record of every IP block and address you hold: how your supernets are split into subnets, which VLAN and gateway each subnet uses, and which device, service or customer holds each address now and held it before. For a hosting provider, IPAM is also stock control for something you sell.
Enterprise IT uses IPAM to keep a network tidy. Hosts need more, because an address is a product line: sold as an add-on, handed out when an order provisions, taken back when a service ends, and looked up when an abuse report arrives. Below: what an IPAM tracks, how it differs from DNS and DHCP, when a spreadsheet stops being enough, and what to check if you sell VPS, dedicated servers or colocation.
What does an IPAM track?
Every IPAM holds the same six kinds of record.
- Supernets and subnets. The blocks you received from a registry or an upstream, and the tree you carve them into — a /22 split into /24s, a /24 split into /29s for customers — so you can see what is free at every level.
- VLANs. The layer-2 segments your subnets live on, with their IDs and the sites where they exist. A subnet without its VLAN tells you the numbers but not where they are reachable.
- Assignments. Which address or block belongs to which server, VM, switch, service and customer. The record everyone looks up, and the first to go stale.
- Gateways and network settings. The gateway for each subnet and the resolvers you hand out, read by provisioning when it configures a machine.
- Reservations and holds. Addresses kept back for network gear, out-of-band management, a migration, or a block that landed on a blocklist.
- History. Who held an address, from when to when. Without it an IPAM can only answer “who has this now”, which is rarely the question that matters.
Utilisation falls out of the assignments, and tells you to buy or reclaim space before an order fails.
Is IPAM the same as DHCP and DNS?
No. The three are often sold together as DDI — DNS, DHCP and IPAM — but each does a different job.
- DNS translates names to addresses. PTR records in the reverse zones go the other way, which is what a mail server checks when it looks up who is connecting.
- DHCP hands addresses to hosts automatically from a configured range and records the leases.
- IPAM is the plan and the register above both: which ranges exist, what they are for, and who holds what.
DDI suites put the three under one console so leases and records update the register automatically — valuable in an office full of laptops. Hosting is different. Customer servers and VMs mostly get static addresses written into their configuration at provisioning, so the register, and its link to the customer who pays for each address, does most of the work.
When does an IP spreadsheet stop working?
A spreadsheet is a reasonable IPAM for one person and a couple of /24s. It breaks in predictable ways.
Double assignment. Two people see .45 as free and both use it. Nothing in a spreadsheet enforces one holder per address, so the first sign is two customers with intermittent outages and an address conflict nobody suspects for an hour.
Addresses that never come back. A service is terminated in billing and its row still says “assigned”. A few years of churn later you hold a /24 that is a quarter dead while you shop for more space. That is real money: one marketplace’s tally of priced IPv4 transfers in the first half of 2026 put the average at $20.04 per address, about $5,130 for a /24.
The abuse report you cannot answer. A complaint names traffic from 203.0.113.45 at 14:10 on 3 March. The sheet tells you who has that address today. If it changed hands since, you name the wrong customer or nobody — and the same question arrives from law enforcement.
Registry records that drift. RIPE NCC policy says all assignments must be registered in the RIPE Database and the data kept correct at all times; ARIN’s policy manual requires IPv4 reassignments of a /29 or larger to be registered and visible within seven days. A sheet updated when somebody remembers cannot meet either. Registry rules and lawful-request obligations differ by region; this is not legal advice.
The wrong datacenter. With two sites, a free address is only useful where its block is routed. A sheet that lists “free” without a location invites somebody to give a Frankfurt address to a server in Amsterdam.
The moment to move is one of three: a second person assigning addresses, provisioning that should pick addresses without a human, or a second location.
How is IPv4 managed differently from IPv6?
IPv4 is per-address inventory. The RIPE NCC made its last /22 allocation on 25 November 2019; new members can only join a waiting list for a single /24, and everyone else buys on the transfer market. An IPAM should track individual IPv4 addresses, show utilisation per block, and make reclaiming idle space routine.
IPv6 is per-prefix inventory. Nobody runs out of IPv6, so you track which prefix went where, not individual addresses. A /64 per server or VM is the usual unit, and customers who route their own subnets get more — RIPE-690, the operators’ best practice for end-user assignments, strongly discourages anything longer than a /56. Allocate the prefix to the service and do not create a record per address inside it.
Prefix sizes and whether to charge for IPv6 are covered in IPv6 allocation and billing for hosting providers. The IPAM point is simpler: keep both families in the same register, against the same services.
What does a hosting provider need from IPAM that an enterprise doesn’t?
General-purpose IPAM is built around devices and networks. A host’s IPAM must also be built around orders and customers.
- Addresses tied to services and customers. The useful question is “which paying service holds this address”, and the answer must survive a reinstall for someone else.
- Allocation on order. When a paid order provisions, addresses of the right family should come from the right pool without a ticket — ideally with capacity checked before a server is committed, so a shortage is a clear refusal rather than a half-built machine.
- Reclaim on termination, with a reuse policy. Termination should free addresses automatically. Some hosts also rest freed addresses for a few weeks before reselling them, so complaints and blocklist entries aimed at the previous customer do not land on the next one.
- Per-IP pricing that drives allocation. The extra-IP option the customer buys should tell the IPAM how many addresses to hand out, so the invoice and the allocation cannot disagree.
- Management versus customer addressing. IPMI and switch-management addresses belong to the hardware and stay when a dedicated server changes hands; public addresses belong to the service and leave with it.
- Location scoping. Pools tied to sites, so a machine only gets an address routed where it sits — see billing across multiple datacenters.
IPAM feature checklist: what should you look for?
The third column is the question that separates a real answer from a brochure.
| Capability | Why it matters to a host | Ask the vendor |
| Subnet tree for IPv4 and IPv6 | You carve customer blocks from larger allocations | Can a /24 be split to /29s and merged back once they are free? |
| VLAN and location on every block | An address is only useful where it is routed | Will it refuse a block for equipment at another site? |
| One holder per address | Prevents double assignment | Is uniqueness enforced by the database, or only by the screen? |
| Link to service and customer | Abuse, billing and audits start from an address | Can I get from an IP to the paying customer in one step? |
| Allocate on order | Removes the manual step where duplicates enter | Is free space checked before hardware is committed? |
| Release on termination | Stops dead assignments piling up | Does termination free addresses with no staff action, and what stays attached? |
| Holds with a reason | Keeps blocklisted or infrastructure space out of rotation | Can I park an address without deleting it, and see why? |
| Allocation history | Answers “who had this address on that date” | Is history kept after the service or customer is deleted? |
| Low-space warnings | Buy or reclaim before orders fail | Does it warn me per location before a pool runs dry? |
| Priced IP add-ons | Invoice and allocation must agree | Does buying an extra-IP option allocate the addresses? |
How do IPAM and DCIM fit together?
DCIM — datacenter infrastructure management — tracks the physical estate: racks, devices, power, ports and cabling. IPAM tracks the logical estate. They meet at the device an address is assigned to, the switch port and VLAN that carry it, and the location both belong to. As separate products, each join is an integration you maintain; in one schema, an abuse report goes from address to service to rack in one lookup. The physical side is covered in DCIM software for hosting and colocation.
Where does FluxBilling’s IPAM fit?
FluxBilling is billing, DCIM and provisioning for hosting providers, and IPAM is part of every plan. What it does today, per the IPAM documentation:
- One tree for IPv4 and IPv6. Blocks are registered by CIDR, split and merged, scoped to a location, and given a role — customer-facing, management, IP transit or virtual server — that the allocator enforces. VLANs record the locations they span.
- Automatic or manual addressing. In Automatic mode a product’s rules (count or block size, family, purpose) are filled from auto-allocatable space at the service’s location when it provisions, and the order is checked against free space before hardware is consumed. In Manual mode the rules act as templates for staff.
- Extra IPs as priced options. A network option can carry an IPAM allocation spec, so a choice such as “/29 (8 usable IPs)” is both the price line and the instruction to allocate — see product options.
- One holder per address. The database refuses a second live allocation of the same address.
- Release on termination. Terminating a service releases its addresses and blocks in one step; IPMI and network-management addresses stay with the hardware.
- Holds with a reason. Any block or address can be marked unavailable with a written reason, without deleting it.
- Who held it, and when. Every allocation and release is recorded with a snapshot of the customer and service. Reports > IP allocations takes an address, block or customer plus a date range, lists each holder with assigned and released times, and exports to CSV or PDF.
- Low-space warning for VPS. With the VPS module, staff are warned when allocatable IPv4 at a location drops below a threshold you set.
The limits, plainly. Freed addresses go straight back to Available; there is no automatic cool-down, so to rest released space, mark it unavailable with a reason and clear the hold later. There is no CSV import on the IPAM page: you register your blocks by CIDR — a handful of entries for most hosts — and address records build up as services provision or as you allocate. And it is not a DDI suite: DNS and DHCP servers managed from one console across a corporate network are a different category of product. The IPAM feature page shows the allocation engine in more detail.
IPAM, DCIM and billing are on every FluxBilling plan from €4.95 a month ($5.95 for US accounts) — see pricing. Subscriptions carry a 14-day refund, or try the live demo first.
Frequently asked questions
What is IPAM in networking?
IPAM, or IP address management, is the planning and record-keeping of an organisation’s IP address space: which blocks it holds, how they are subnetted, and which device or customer uses each address. It can live in a spreadsheet, a dedicated tool or a larger platform.
Is IPAM the same as DHCP?
No. DHCP hands addresses to hosts automatically from configured ranges; IPAM is the register of which ranges exist and who holds what. DDI suites connect the two, but you can run IPAM with no DHCP at all, which is common for statically addressed servers.
Can I manage IP addresses in a spreadsheet?
Yes, while one person assigns addresses from a couple of blocks at one site. It stops working when two people assign at once, when provisioning should pick addresses automatically, or when you need to know who held an address on a past date.
What is the difference between IPAM and DCIM?
DCIM manages physical infrastructure: racks, devices, power and cabling. IPAM manages logical addressing: subnets, VLANs and IP addresses. Hosting providers need both, and they work best sharing records, because addresses are assigned to the devices DCIM tracks.
Is there IPAM as a service (SaaS)?
Yes. IPAM comes as hosted software, as self-hosted tools, and as a module inside hosting platforms. FluxBilling is the last kind: managed, with IPAM on every plan, and self-hosting on the Business plan for a one-time fee.
Sources
- RIPE NCC — “The RIPE NCC has run out of IPv4 Addresses”, ripe.net, 25 November 2019, read 12 October 2026.
- RIPE NCC — RIPE-826, “IPv4 Address Allocation and Assignment Policies for the RIPE NCC Service Region”, sections 4.0 and 6.2, ripe.net, read 12 October 2026.
- ARIN — Number Resource Policy Manual, version 2025.1 of 3 March 2026, sections 4.2.3.7.1 and 4.2.3.7.2, arin.net, read 12 October 2026.
- RIPE NCC — RIPE-690, “Best Current Operational Practice for Operators: IPv6 prefix assignment for end-users”, ripe.net, read 12 October 2026.
- CircleID — “IPv4 Market in H1 2026: A Price Reset, Not a Market Collapse”, Mustafa Akdeniz (IPv4.Center), 6 July 2026, circleid.com, read 12 October 2026.