Orange Net

One private network for every device: encrypted mesh, smart routing and DNS, TUN gateway, native WireGuard, multi-protocol proxying, and live observability.

Your private network, everywhere.

Orange links the devices and servers you already own into one encrypted private network — with policy routing, DNS control, and live diagnostics in a single local configuration.

Orange connects to infrastructure you run yourself. It does not provide proxy nodes, VPN exit servers, or a hosted mesh service.

MESH PRIVATE NETWORK • Link your devices into one encrypted network with stable, persistent IPs • Reach any node by name — no IP addresses to remember • Verified peer-to-peer paths when the network allows, otherwise through your own relay • End-to-end encrypted: your relay forwards opaque packets and never holds session keys • No account, no sign-up — Orange talks only to the servers you configure • Access by device, port, and protocol, enforced by your control node • Reach an entire LAN through a gateway node you operate

POLICY ROUTING • Match on domain, IP, GeoSite, and GeoIP • Refine with source IP, destination port, inbound type, and ALPN • Upstream pools with health checks and automatic member selection • Global modes: rules, direct, reject, or a single forced upstream • Per connection: direct, reject, or through an upstream

DNS CONTROL • Per-domain upstream selection, including concurrent upstreams • Encrypted DNS upstreams over DoT and DoH • Fake-IP for domain-level routing under TUN • Block ads and trackers at the DNS level using GeoSite categories

SYSTEM-WIDE TUN • Captures TCP, UDP, and DNS through the iOS Network Extension • SNI, HTTP, and QUIC sniffing for accurate domain-based routing • DNS hijack prevention keeps queries on your resolver • Every app reaches your private network without per-app setup

YOUR OWN OUTBOUNDS • HTTPS, Trojan, Shadowsocks 2022, and WireGuard • Import nodes by pasting trojan://, ss:// or https:// URIs • WireGuard runs in userspace inside the Network Extension • HTTP/2 multiplexing on compatible HTTPS upstreams

BUILT-IN DIAGNOSTICS • Live request tracing — path, timing, and failure reason per connect • Real-time traffic and metrics dashboard, no extra tooling required • Upstream health and latency at a glance • Readable logs you can export when something needs a closer look

ON YOUR HOME SCREEN • Widgets to toggle the tunnel and switch fallback policy • Shortcuts and Siri for start, stop, status, and live metrics

DESIGNED FOR • Reaching a home NAS, router, or IoT device from anywhere • Keeping your own devices on one always-on private network • Connecting to an office intranet or internal services • Linking multiple sites through nodes you operate • Blocking ads and trackers at the DNS level • Routing development and staging traffic by rule • Reaching self-hosted services without exposing them to the internet

SUBSCRIPTION

Orange is free to download. Starting the tunnel requires a subscripti

• Orange Annual — auto-renewing yearly subscription, US$39.99 per yea • Eligible new subscribers get a discounted first year during the launch period. The exact price is always shown before you confirm. • Prices outside the United States are set by the App Store and may differ.

One subscription covers every supported iPhone and iPad signed in to your Apple Account, with no device limit. Family Sharing is not supported.

Payment is charged to your Apple Account at confirmation of purchase. subscription renews automatically at the standard price unless canceled at least 24 hours before the end of the current period. Manage or cancel anytime in Account Settings.

Your subscription covers the Orange app itself. It does not include proxy nodes, VPN service, or relay bandwidth.

Privacy Policy: https://orangenet.app/privacy-policy Terms of Use: https://orangenet.app/terms-of-use

CONTACT

Web: https://orangenet.app Mail: contact@orangenet.app