Access blocked websites and services from a country with heavy internet censorship by routing traffic through a server abroad.
Speed up browsing through a proxy by using multiplexing so many page requests share one encrypted connection.
Route only foreign traffic through the proxy while domestic sites connect directly, for faster overall speeds.
Run the proxy through a CDN using WebSocket connections when direct server connections are blocked.
Requires a server located outside the censored network plus a JSON or YAML config file, graphical clients are available for those who prefer not to use the command line.
Trojan-Go is a proxy tool written in Go that helps people in countries with heavy internet censorship access blocked websites and services. It does this by disguising network traffic as ordinary HTTPS web traffic, making it very difficult for automated censorship systems to identify and block. The project is a reimplementation of an older proxy protocol called Trojan, with a number of added features and improvements. The tool runs as either a server or a client. You install the server on a computer located outside the censored network, and the client runs on your local machine. Traffic from your device passes through an encrypted tunnel to the server, which then connects to whatever site or service you wanted to reach. The client can accept connections in several standard proxy formats, so most apps can be routed through it without extra configuration. Trojan-Go adds several capabilities on top of the original Trojan protocol. A multiplexing feature lets a single encrypted connection carry many simultaneous requests, which reduces delays when loading pages with lots of images or files. A built-in routing module lets you decide which traffic goes through the proxy and which connects directly, so domestic sites load at full speed. It also supports routing traffic through a CDN service using WebSocket connections, which can help in situations where direct connections to the server are blocked. For users who want extra protection, there is an optional second layer of encryption based on the Shadowsocks AEAD standard, which prevents even CDN servers from inspecting the content. The transport layer is also swappable through a plugin system that follows an established plugin standard, so you can substitute different obfuscation tools if needed. The compiled binary has no external dependencies and runs on Windows, macOS, Linux, and even low-power devices like routers or single-board computers. Graphical client apps are available for Windows, macOS, Linux, and Android for those who prefer not to use the command line. Configuration is done via a JSON or YAML file, and pre-built binaries are available from the releases page.
← p4gefau1t on gitmyhub — every repo by this author, as a profile.
Verify against the repo before relying on details.