Trojan Protocol: Compatibility & Fallback Guide
Trojan is FreeGuard’s most compatible protocol, designed to work on networks where other VPN protocols fail. This guide explains when and how to use Trojan as your fallback option for maximum connectivity.
TL;DR (Quick Summary)
- Trojan perfectly mimics HTTPS traffic — extremely difficult to detect
- Best for restricted networks where VPNs are actively blocked
- Use as a fallback when AnyTLS or Hysteria2 don’t connect
- Slower than other protocols but most reliable in difficult conditions
- Ideal for travel to regions with internet restrictions
What Is the Trojan Protocol?
Trojan is designed with one primary goal: undetectability. It achieves this by making VPN traffic look exactly like normal HTTPS web browsing.
Why “Trojan”?
The name comes from the concept of the Trojan Horse — hiding something inside something else that appears completely normal. Trojan VPN traffic hides inside standard TLS connections.
How It Works
Regular HTTPS Request:
Browser → TLS Handshake → Website Server → Webpage Response
Trojan VPN Request:
FreeGuard → TLS Handshake → FreeGuard Server → VPN Tunnel
(Looks identical to HTTPS)
Network monitors see standard HTTPS traffic to what appears to be a regular web server. There’s no signature indicating VPN usage.
When to Use Trojan
Primary Use Cases
🌍 Traveling to Restricted Regions
If you’re visiting countries with internet censorship:
- China: The Great Firewall actively blocks VPNs
- Iran: VPN usage is restricted
- Russia: Increasingly strict VPN regulations
- UAE: Some VPN protocols are blocked
- Turkey: Periodic VPN restrictions
Recommendation: Switch to Trojan before arriving, or have it ready as backup.
🏢 Corporate Networks
Some workplace networks block VPN traffic:
- Enterprise firewalls detecting VPN signatures
- Deep packet inspection (DPI) systems
- Strict egress filtering
Note: Always comply with your workplace policies.
🏨 Hotels & Public Wi-Fi
Some hospitality networks restrict VPN usage:
- Premium hotel chains blocking personal VPNs
- Airport Wi-Fi with content filtering
- Cafe networks with traffic inspection
🔧 When Other Protocols Fail
Use Trojan when:
- AnyTLS won’t connect
- Hysteria2 is blocked
- You see “connection timeout” errors
- VPN connects but no traffic passes
Technical Details
Protocol Architecture
| Component | Specification |
|---|---|
| Transport | TCP |
| Encryption | TLS 1.3 |
| Port | 443 (HTTPS) |
| Authentication | Password-based |
| Traffic Pattern | Indistinguishable from HTTPS |
Security Features
- Full TLS Encryption: Same security as online banking
- Perfect Forward Secrecy: Past sessions can’t be decrypted
- No VPN Signature: Passes deep packet inspection
- Valid Certificates: Uses legitimate TLS certificates
Why Trojan Is Hard to Block
Blocking Trojan would require blocking all HTTPS traffic, which would break the internet:
Can a network block Trojan specifically?
│
├── Block port 443? → Breaks ALL websites (impractical)
│
├── Block by IP? → Trojan servers have clean IPs
│ (not on blocklists)
│
├── DPI inspection? → Traffic is genuine TLS
│ (no VPN markers to detect)
│
└── Certificate check? → Uses valid certificates
Performance Characteristics
Speed Comparison
| Protocol | Relative Speed | Latency | Compatibility |
|---|---|---|---|
| AnyTLS | 100% | Low | Excellent |
| Hysteria2 | 120-150% | Very Low | Good |
| Trojan | 70-85% | Medium | Excellent+ |
Why Trojan Is Slower
- TCP-only: No UDP optimization
- Full TLS overhead: Every packet encrypted
- Single stream: Less efficient multiplexing
- Conservative design: Prioritizes stealth over speed
When Speed Doesn’t Matter
Trojan is still plenty fast for:
- Web browsing (email, news, social media)
- Standard video streaming (1080p)
- Messaging apps
- Remote work basics
How to Switch to Trojan
On FreeGuard PC
- Open FreeGuard VPN
- Go to Settings
- Find VPN Protocol
- Select Trojan
- Click Save
- Reconnect to the VPN
Quick Switch Method
If your primary protocol stops working:
- Disconnect from VPN
- Switch to Trojan in settings
- Reconnect
- Test with a website like ipinfo.io
Troubleshooting with Trojan
Trojan Won’t Connect Either
If even Trojan fails:
- Check basic internet: Can you browse without VPN?
- Try different servers: Some may be blocked by IP
- DNS issues: Try changing DNS settings
- Contact support: Network may have advanced blocking
Very Slow Speeds
Trojan is slower by design, but if unusually slow:
- Try closer servers: Distance matters more with TCP
- Check network congestion: Test at different times
- Server load: Try servers with lower user count
Intermittent Disconnections
- Network stability: Trojan is sensitive to packet loss
- Enable auto-reconnect: In FreeGuard settings
- Try wired connection: More stable than Wi-Fi
Comparison: When to Use Each Protocol
| Situation | Recommended Protocol |
|---|---|
| Normal browsing | AnyTLS |
| Gaming/streaming | Hysteria2 |
| Restricted network | Trojan |
| AnyTLS blocked | Trojan |
| Hysteria2 blocked | AnyTLS, then Trojan |
| Maximum stealth | Trojan |
| Maximum speed | Hysteria2 |
Trojan vs Other Stealth Protocols
Trojan vs AnyTLS
| Aspect | Trojan | AnyTLS |
|---|---|---|
| Stealth | Excellent | Excellent |
| Speed | Moderate | Good |
| Detection Resistance | Highest | Very High |
| Server Efficiency | Lower | Higher |
| Best For | Blocked networks | Daily use |
Summary: AnyTLS is better for normal conditions; Trojan is better when AnyTLS is blocked.
Trojan vs Shadowsocks
| Aspect | Trojan | Shadowsocks |
|---|---|---|
| Protocol | Full TLS | Custom encryption |
| Detection | Harder to detect | Easier to fingerprint |
| Setup | Simpler | More complex |
| Maturity | Newer | Well-established |
Summary: Trojan’s full TLS implementation makes it more resistant to modern detection.
Best Practices for Restricted Networks
Before Travel
- Install FreeGuard and verify it works
- Test all three protocols before leaving
- Note server addresses you can connect to
- Download offline materials as backup
While on Restricted Networks
- Start with Trojan if you expect blocking
- Use nearby servers for better speeds
- Keep connection active to avoid re-authentication
- Have mobile data backup if Wi-Fi fails
Security Considerations
- Keep FreeGuard updated for latest stealth improvements
- Don’t discuss VPN usage on unsecured channels
- Comply with local laws and regulations
- Use private browsing alongside VPN
Frequently Asked Questions
Is Trojan legal to use?
VPN legality varies by country. Trojan itself is just a protocol — it’s how you use it that matters. Always comply with local laws.
Can Trojan be detected by sophisticated systems?
While extremely difficult, no stealth method is 100% undetectable. Trojan represents the current best practice for evading detection.
Should I always use Trojan for maximum privacy?
No. For privacy on normal networks, AnyTLS provides the same encryption with better speed. Use Trojan when stealth from network operators is needed.
Does Trojan hide my activity from FreeGuard?
Trojan encrypts traffic between you and FreeGuard servers. FreeGuard maintains a no-logs policy, meaning your browsing isn’t recorded regardless of protocol.
Why not make Trojan the default?
AnyTLS offers better performance for most users. Trojan’s stealth comes at a speed cost that isn’t necessary on unrestricted networks.
Can I use Trojan for streaming?
Yes, Trojan handles 1080p streaming fine. For 4K, you may want Hysteria2 if your network allows it.
Next Steps
- Download FreeGuard to access Trojan protocol
- View pricing plans for unlimited protocol switching
- AnyTLS Guide for everyday use
- Hysteria2 Guide for maximum speed
- Protocol Overview for complete comparison
Last updated: January 2026