trojan-gfw/trojan
Trojan
Trojan is a censorship circumvention tool and TLS proxy server designed to bypass network restrictions by imitating legitimate web services. It functions as a TLS traffic obfuscator that masks proxy activity by mimicking the handshake and data flow of standard HTTPS requests.
The system disguises network traffic as common web browsing to avoid deep packet inspection. It achieves this by wrapping TCP and UDP data within TLS encryption and forwarding unauthenticated or unauthorized requests to a legitimate destination website to hide the proxy's purpose.
The project provides a tunnel that converts SOCKS5 proxy requests into encrypted TLS traffic for routing. It includes capabilities for transparent proxying at the gateway level, credential-based access control through password or database authentication, and data quota management.
The service supports deployment via Docker containerization and allows for dynamic configuration and certificate reloading through system signals.
Features
- Censorship Circumvention Tools - Acts as a networking tool designed to bypass national firewalls by imitating legitimate web services over secure encrypted connections.
- Protocol Imitations - Imitates the HTTPS protocol to make encrypted proxy connections appear as legitimate web browsing.
- SOCKS5 Translation - Translates SOCKS5 proxy requests into a proprietary encrypted format for secure routing.
- Proxy Servers - Functions as a proxy server that disguises network traffic as standard HTTPS requests to bypass deep packet inspection.
- SOCKS5 Servers - Implements a SOCKS5 server interface to intercept and tunnel application traffic.
- SOCKS5 Proxies - Routes application traffic through a local SOCKS5 interface to redirect network requests to a remote destination.
- Protocol Translation - Converts standard SOCKS5 application requests into a proprietary tunnel format for routing TCP and UDP traffic.
- Censorship-Resistant Redirections - Forwards unauthenticated or probe requests to a legitimate destination website to hide the proxy's true purpose.
- Traffic Disguise Techniques - Wraps network data in TLS handshakes to make tunnel traffic indistinguishable from standard HTTPS requests.
- SOCKS5-to-TLS Tunnels - Provides a tunnel that converts SOCKS5 proxy requests into encrypted TLS traffic to hide connection patterns.
- TLS Traffic Encryption - Wraps TCP and UDP data within TLS encryption to securely move traffic between a client and a remote server.
- Traffic Encryption Services - Imitates common web services over TLS to disguise proxy traffic as normal HTTPS requests.
- Protocol Mimicry - Wraps network data in standard HTTPS handshakes to make encrypted tunnels indistinguishable from legitimate web browsing traffic.
- Traffic Obfuscators - Imitates legitimate web services and HTTPS handshakes to hide proxy activity from deep packet inspection.
- Web Server Mimicry - The service responds to plain HTTP requests with a specific file to mimic a legitimate web server.
- TCP and UDP Forwarders - Redirects raw TCP and UDP traffic through encrypted connections to specific endpoints.
- Transparent Network Proxies - Intercepts network packets at the gateway level to route traffic through the tunnel without needing application-side configuration.
- Unauthorized Traffic Redirection - Forwards requests lacking valid credentials to a preset endpoint to mimic a legitimate service during network probes.
- Credential-Based Access Controls - Implements access control by verifying incoming connection requests against a database of passwords.
- Password Authentication - Verifies incoming connections against a predefined password list before allowing traffic to reach the destination.
- User Authentication Systems - Verifies user credentials against a database to grant or deny access based on stored account records.
- Media & Communication - Mechanism to bypass GFW.
