prefixkit Ask an engineerAsk Support RU

IP & network

Service IP ranges for routing

Current subnets of Telegram, WhatsApp, Instagram, YouTube, Zoom, Microsoft, Apple and more, ready for MikroTik, WireGuard AllowedIPs, Keenetic, OpenWrt, Linux and Windows. Pick several services and get one merged list.

Messengers and social
Video, media and games
Work and calls
Clouds and hosting
Russian services

Loading…

Subnets come from the service's own autonomous systems in the DB-IP IP-to-ASN database (October 2026), merged into the shortest list. Traffic a service serves through other CDNs (Akamai, Cloudflare, ISP caches) is not included.

Lists by service

How to route one service through a VPN and the rest directly

WireGuard

Choose “WireGuard AllowedIPs” and paste the line into the client’s [Peer] section instead of 0.0.0.0/0. Only these subnets go through the tunnel. To build “everything except the LAN” lists, use the AllowedIPs calculator.

MikroTik

The address-list format adds the subnets to a list. Then a mangle rule with a routing mark and a separate routing table through the tunnel:

/routing table add name=via-vpn fib
/ip route add dst-address=0.0.0.0/0 gateway=wg0 routing-table=via-vpn
/ip firewall mangle add chain=prerouting dst-address-list=telegram action=mark-routing new-routing-mark=via-vpn passthrough=no

The simpler way without mangle is the “MikroTik routes” format: one route per subnet. A full config with WireGuard: MikroTik generator.

Keenetic

In the web UI: Routing → Add route, one at a time. Faster from the CLI (Telnet/SSH or the web CLI): put your connection’s name (for example Wireguard0) in the interface field, paste the Keenetic commands and run system configuration save.

Linux, OpenWrt

ip route commands last until reboot. On OpenWrt an ipset or nftables set plus a marking rule is easier to keep; both formats are available.

Where the data comes from

Every large service has its own autonomous systems (AS): address blocks it announces to the internet. We take every subnet of those ASes from the DB-IP database and merge adjacent ones. Any AS can be opened on its own: autonomous systems. For your own lists use the CIDR aggregator.

More tools: ip & network

Ask an engineer newAI answers on networks, DNS, email and VoIP.What is my IPYour address, city, provider, and a WebRTC leak test.IP lookupCountry, city, provider and reverse DNS of any IP.Is it down?Check a site from Russia, the UAE and worldwide.Speed testDownload, upload, jitter, bufferbloat, VoIP capacity.PingLatency and loss from probes around the world.Traceroute & MTRThe path packets take, from many countries.Port checkerIs a TCP port open from the internet.BGP & RPKI check newOrigin AS, ROA validity, visibility and AS paths.WireGuard config generator newServer and client configs, QR codes, MikroTik.MikroTik config generator newRouterOS 7 script: WAN, failover, VLANs, firewall, CAKE.MTU and MSS calculator newPPPoE, WireGuard, IPsec, GRE, VXLAN overhead and MSS.MAC vendor lookup newDevice maker by MAC, IEEE registry, many at once.Port directory newWhat runs on a port, risk, firewall commands.Telegram bot newIP, DNS, ports, SIP and AI right in Telegram.ROA and route objects newRPKI ROAs, IRR route objects, BGP announcement.Cloud region ping newYour delay to AWS, Hetzner, DigitalOcean, Yandex Cloud.Uptime monitoring newSite, port and SIP checks with Telegram alerts.MTR / traceroute analyzer newReal vs fake loss, AS and country per hop.Wi-Fi QR code newJoin Wi-Fi by camera: printable card, PNG, SVG.M3U playlist checker newDead channels, duplicates, EPG, udpxy links.IPTV router setup newIGMP proxy, VLAN, STB port, udpxy: MikroTik, Keenetic, OpenWrt.IPTV players newApps for Android TV, Samsung, LG, Apple and PC.Server sizing newvCPU, RAM and disk for a PBX, VPN or mail.WireGuard AllowedIPs newEverything except the LAN, or only chosen services.IPv6 test newDo you have working IPv6; is a domain IPv6-ready.Autonomous systemsEvery network of a provider, with firewall lists.
Idea?