Aller au contenu

Orange Proxy Usage#

While under FIA or Nomade VPN it is possible to use Orange Proxies. This could be useful to test Orange and partners Operator's context while using our services. Orange Proxies use NTLM authentication with AD credentials.

Orange proxies / VPN list#

Theses IP ranges used by proxies / VPN NAT Out are whitelisted on Caascad infrastructure: See envs-ng/contexts/ipam.cue.

  • VPN Orange nomade / Proxy RSC (Source):
    • 80.12.67.48/28
    • 80.12.125.32/27
    • 80.12.126.32/28
    • 80.12.102.160/28
    • 193.253.10.128/27
    • 193.253.170.128/27
  • VPN Orange Dev Access / Proxy Partner (Source):
    • 193.253.78.1/32
    • 80.12.66.161/32
    • 80.12.101.167/32
  • VPN Orange FIA (Source):
    • 194.2.202.80/28
    • 217.167.1.64/29

Browser configurations#

Orange provides a script for web browser proxy auto configuration. At the present time there is several proxies URL which can be used:

  • proxybkp.si.francetelecom.fr:8080 (round robin around real proxies)
    • Alias: proxy.si.francetelecom.fr:8080
    • Alias: proxyf5bkp.si.fr.intraorange:8080
  • proxypartner.itn.ftgroup:8080 (CNAME to opprxaub9-prd.idf.fr.ftgroup, a special proxy reserved for external users, Nomade and FIA VPN users)

The real proxies used under the hood are:

  • oppr5aub1-prd.idf.fr.intraorange:8080
  • oppr5aub2-prd.idf.fr.intraorange:8080
  • oppr5vdr1-prd01.si.fr.intraorange:8080
  • oppr5vdr2-prd01.si.fr.intraorange:8080

Their role is to route traffic between internal and external proxies.

proxypartner.itn.ftgroup is a front proxy which routes traffic to the real proxies while providing an alternate authentication method.

External proxies use those resolvers:

  • 80.10.246.2
  • 80.10.246.129

Internal proxies use internal Orange resolvers.

Architecture#

Depending on the user context, the first proxy encountered is the proxypartner or proxybkp, proxypartner routes traffic through proxybkp. proxybkp examines the FQDN requested and chooses to route traffic to external proxies able to do DNS resolution on the internet, or internal proxies able to do DNS resolution on the intranet only. When the traffic is routed to external proxies, the request done by the proxy is sent to a MacAfee Web Security Gateway.

External traffic for partners: proxypartner -> proxybkp -> external proxies -> MacAfee Security Gateway External traffic for internal users: proxybkp -> external proxies -> MacAfee Security Gateway Internal traffic for partners: proxypartner -> proxybkp -> internal proxies Internal traffic for internal users: proxybkp -> internal proxies

Support Proxy#

Email contact for proxy support is support.accesinternet@orange.com. They are part of ORANGE/OF/DTSI/PFC/RAISE/SCI/PSC organization.