Orange Net

Your private network, everywhere.

Orange turns the devices and servers you already own into one encrypted private network. Policy routing, DNS control and live diagnostics share one local configuration, so you always know where a connection went and why.

Orange connects only to infrastructure you run yourself. No proxy nodes, no VPN exit servers, no hosted mesh service. Nothing you send passes through a server we operate.

MESH PRIVATE NETWORK
• Link your devices into one encrypted network with stable, persistent IPs
• Reach any node by name, no IP addresses to remember
• Verified peer-to-peer paths when the network allows, your own relay when it doesn't
• End-to-end encrypted: your relay forwards sealed packets and never holds session keys
• No account, no sign-up. Orange talks only to the servers you configure
• Access by device, port and protocol, enforced by your control node
• Reach an entire LAN through a gateway node you operate

POLICY ROUTING
• Match on domain, IP, GeoSite and GeoIP
• Refine with source IP, destination port, inbound type and ALPN
• Upstream pools with health checks and automatic selection
• Global modes: rules, direct, reject, or a single forced upstream
• Per connection: direct, reject, or a chosen upstream

DNS CONTROL
• Per-domain upstream selection, including concurrent upstreams
• Encrypted DNS over DoT and DoH
• Fake-IP for domain-level routing under TUN
• Block ads and trackers at the DNS level with GeoSite categories

SYSTEM-WIDE TUN
• Captures TCP, UDP and DNS through the iOS Network Extension
• SNI, HTTP and QUIC sniffing for accurate domain routing
• DNS hijack prevention keeps queries on your resolver
• Every app reaches your private network, no per-app setup

YOUR OWN OUTBOUNDS
• HTTPS, Trojan, Shadowsocks 2022 and WireGuard
• Import nodes by pasting trojan://, ss:// or https:// URIs
• WireGuard runs in userspace inside the Network Extension
• HTTP/2 multiplexing on compatible HTTPS upstreams

BUILT-IN DIAGNOSTICS
• Live request tracing: path, timing and failure reason per connection
• Real-time traffic and metrics dashboard, no extra tooling
• Upstream health and latency at a glance
• Readable logs you can export when you need a closer look

ON YOUR HOME SCREEN
• Widgets to toggle the tunnel and switch fallback policy
• Shortcuts and Siri for start, stop, status and live metrics

DESIGNED FOR
• Reaching a home NAS, router or IoT device from anywhere
• Keeping your own devices on one always-on private network
• Connecting to an office intranet or internal services
• Linking multiple sites through nodes you operate
• Routing development and staging traffic by rule
• Reaching self-hosted services without exposing them to the internet

SUBSCRIPTION

Orange is free to download and configure: import, edit, validate and export your configuration without subscribing. Only starting the tunnel requires a subscription.

• Orange Annual: auto-renewing yearly subscription, US$39.99 per year
• Eligible new subscribers get a discounted first year during the launch period. The exact price confirm.
• Prices outside the United States are set by the App Store and may differ.

One subscription covers every supported iPhone and iPad signed in to your Apple Account, with no device limit. Family Sharing is not supported.

Payment is charged to your Apple Account at confirmation of purchase. The subscription renews automatically at the standard price unless canceled at least 24 hours before the end of the current period. Manage or cancel
anytime in Settings > your name > Subscriptions.

If your subscription ends, your configurations stay yours to open, edit, export and back up.

Your subscription covers the Orange app itself. It does not include proxy nodes, VPN service or r

Privacy Policy: https://orangenet.app/privacy-policy
Terms of Use: https://orangenet.app/terms-of-use

CONTACT

Web: https://orangenet.app
Mail: contact@orangenet.app