One Address, Everyone Listens
Normally an IP packet is unicast — addressed to a single recipient. A broadcast packet is different: it is addressed to all hosts on the subnet at once. Every device on that network segment receives and processes it. This is useful precisely when a host does not yet know who it needs to talk to — it broadcasts a question, and the right machine answers.
The broadcast address is a reserved slot in every subnet, set aside for exactly this purpose. Because it means "everyone here," it cannot also mean "this one device," so it can never be assigned to a host. That reservation, along with the network address at the other end, is why a subnet's usable host count is always two fewer than its total address count.
Why It's the All-Ones Address
Recall that a subnet mask splits an address into network bits (fixed) and host bits (variable). The two extreme combinations of the host bits are reserved:
| Host bits | Meaning | Example (/24) |
|---|---|---|
| All zeros | Network address — names the subnet itself | 192.168.1.0 |
| All ones | Broadcast address — reaches every host | 192.168.1.255 |
Setting every host bit to 1 produces the highest address in the subnet, and that is the broadcast address by definition. In a /24, the entire last octet is host bits, and all-ones in that octet is 255 — hence the familiar 192.168.1.255. This is where the "broadcast is the .255" intuition comes from, but it is only a special case of the /24, not a universal rule.
It's Not Always .255
The broadcast address is always the highest address in the subnet, which depends entirely on the mask. Once you subnet more finely than a /24, the broadcast moves. Take 192.168.1.0/26, which splits the /24 into four subnets of 64 addresses each. Each one has its own broadcast address:
| Subnet | Network | Broadcast |
|---|---|---|
| 1 | 192.168.1.0 | 192.168.1.63 |
| 2 | 192.168.1.64 | 192.168.1.127 |
| 3 | 192.168.1.128 | 192.168.1.191 |
| 4 | 192.168.1.192 | 192.168.1.255 |
So .63, .127, and .191 are all broadcast addresses here, just as much as .255 is — each is the last address of its own subnet. The quick way to find any subnet's broadcast is the block-size method: it is the network address plus the block size minus one.
Directed vs Limited Broadcast
There are two flavours of IPv4 broadcast, distinguished by how far they travel:
- Directed broadcast — uses a specific subnet's broadcast address, like
192.168.5.255. It targets all hosts on that particular network. In principle a router could forward it toward that subnet, though this is usually disabled today because it was abused in amplification attacks. - Limited broadcast — uses the all-ones address
255.255.255.255. Routers never forward it; it stays on the local link and reaches only directly connected hosts. This is what a device uses when it does not yet have an IP and cannot know its subnet — most famously, DHCP discovery, where a freshly booted device shouts to255.255.255.255hoping a DHCP server replies.
The distinction matters: limited broadcast is the "shout to my immediate neighbours" case, while a directed broadcast names a far-off subnet's everyone-address. Both stop at the boundary of a single broadcast domain unless explicitly allowed across.
Broadcast, Multicast, and Why IPv6 Dropped It
Broadcast has an obvious inefficiency: it interrupts every host, even ones with no interest in the message, forcing each to receive and inspect traffic it will likely discard. For one-to-many delivery to an interested subset, multicast is the better tool — it reaches only hosts that have opted into a specific group, sparing everyone else. The contrast is simple: broadcast is "everyone, like it or not"; multicast is "only those who signed up."
That inefficiency is why IPv6 removed broadcast altogether. There is no broadcast address in IPv6; every job IPv4 used it for is handled by multicast instead, using well-defined groups such as all-nodes and all-routers. A device that wants to reach every node on the link sends to the all-nodes multicast group rather than shouting at the entire subnet. It is the same goal — reach many hosts at once — accomplished without the indiscriminate noise. For where broadcast traffic is contained, see collision vs broadcast domains.
Frequently Asked Questions
What is a broadcast address?
A special subnet address that delivers a packet to every host on that subnet at once, rather than one device. It is the last address — all host bits set to one — and cannot be assigned to a device, since it is reserved for reaching all of them.
Why is the broadcast address usually the .255?
In a /24 the last octet is all host bits, and setting them all to one gives 255 — so it ends in .255. That is only true for a /24, though. The broadcast is always the highest address in the subnet, so in a /26 it may be .63, .127, .191, or .255.
What is the difference between directed and limited broadcast?
A directed broadcast targets a specific remote subnet's broadcast address (e.g. 192.168.5.255), aimed at all hosts there. A limited broadcast uses 255.255.255.255, is never forwarded by routers, and stays on the local link. DHCP discovery uses the limited broadcast.
How is broadcast different from multicast?
Broadcast reaches every host on the subnet whether they want the traffic or not. Multicast reaches only hosts that joined a specific group — an interested subset. Multicast is more efficient for one-to-many delivery, which is why it, not broadcast, is used for streaming to multiple receivers.
Does IPv6 have a broadcast address?
No. IPv6 removed broadcast entirely. The jobs IPv4 used it for are handled by multicast, including all-nodes and all-routers groups. This avoids forcing every device to process traffic it may not need.