Trojan

TCP, and UDP framed inside the same stream. A request with a wrong password can go to the inbound's fallback, so a probe sees an ordinary site.

WARNING

Trojan does not encrypt. Run it over tls, or the password hash and all traffic cross the wire in the clear.

Structure

{
  "tag": "trojan-in",
  "listen": "0.0.0.0",
  "port": 443,
  "transport": [
    { "type": "tcp" },
    {
      "type": "tls",
      "settings": {
        "certificates": [
          {
            "certificate_file": "/etc/apranik/cert.pem",
            "key_file": "/etc/apranik/key.pem"
          }
        ]
      }
    }
  ],
  "protocol": {
    "type": "trojan",
    "settings": {
      "users": [{ "name": "alice", "password": "correct horse" }],
      "handshake_timeout": "10s"
    }
  },
  "fallback": { "server": "127.0.0.1", "server_port": 8080 }
}

Inbound fields

users

list of usersRequired

At least one, each with a name and a unique password. See Users.

handshake_timeout

durationDefault: 10s

How long a client may take to send its request.

Outbound fields

password

stringRequired

The password sent to the server.

The client sends its request with the first payload; see Proxy request timing. A UDP session uses one stream for all its destinations.