Trojan

Trojan's core trick is imitation: it performs a real TLS handshake up front and only then verifies the client with a password. From the outside, the connection is indistinguishable from visiting an HTTPS website, which is exactly what makes the protocol hard to single out.

What Makes Trojan Effective

• Looks ordinary: Sessions are virtually identical to normal HTTPS browsing.
• Fully encrypted: TLS protects data integrity and confidentiality.
• Simple verification: Password-based authentication keeps setup effortless.
• Forward secrecy: Session keys never compromise past communications.
• Broad support: Runs on Windows, macOS, Linux, Android, and iOS.

Using Trojan with FlClash

FlClash supports Trojan through both subscriptions and manual configuration, which needs these values:

• server: Server address
• port: Server port
• password: Authentication password
• sni: Server Name Indication (optional)
• alpn: Application-Layer Protocol Negotiation (optional)