Trojan Protocol: Compatibility & Fallback Guide
Trojan is FreeGuard's most compatible protocol, designed to work on networks where other VPN protocols fail. This guide explains when and how to use Trojan as your fallback option for maximum connectivity.

Trojan Protocol: Compatibility & Fallback Guide

Trojan is FreeGuard’s most compatible protocol, designed to work on networks where other VPN protocols fail. This guide explains when and how to use Trojan as your fallback option for maximum connectivity.

TL;DR (Quick Summary)

  • Trojan perfectly mimics HTTPS traffic — extremely difficult to detect
  • Best for restricted networks where VPNs are actively blocked
  • Use as a fallback when AnyTLS or Hysteria2 don’t connect
  • Slower than other protocols but most reliable in difficult conditions
  • Ideal for travel to regions with internet restrictions

What Is the Trojan Protocol?

Trojan is designed with one primary goal: undetectability. It achieves this by making VPN traffic look exactly like normal HTTPS web browsing.

Why “Trojan”?

The name comes from the concept of the Trojan Horse — hiding something inside something else that appears completely normal. Trojan VPN traffic hides inside standard TLS connections.

How It Works

Regular HTTPS Request:
Browser → TLS Handshake → Website Server → Webpage Response

Trojan VPN Request:
FreeGuard → TLS Handshake → FreeGuard Server → VPN Tunnel
           (Looks identical to HTTPS)

Network monitors see standard HTTPS traffic to what appears to be a regular web server. There’s no signature indicating VPN usage.

When to Use Trojan

Primary Use Cases

🌍 Traveling to Restricted Regions

If you’re visiting countries with internet censorship:

  • China: The Great Firewall actively blocks VPNs
  • Iran: VPN usage is restricted
  • Russia: Increasingly strict VPN regulations
  • UAE: Some VPN protocols are blocked
  • Turkey: Periodic VPN restrictions

Recommendation: Switch to Trojan before arriving, or have it ready as backup.

🏢 Corporate Networks

Some workplace networks block VPN traffic:

  • Enterprise firewalls detecting VPN signatures
  • Deep packet inspection (DPI) systems
  • Strict egress filtering

Note: Always comply with your workplace policies.

🏨 Hotels & Public Wi-Fi

Some hospitality networks restrict VPN usage:

  • Premium hotel chains blocking personal VPNs
  • Airport Wi-Fi with content filtering
  • Cafe networks with traffic inspection

🔧 When Other Protocols Fail

Use Trojan when:

  • AnyTLS won’t connect
  • Hysteria2 is blocked
  • You see “connection timeout” errors
  • VPN connects but no traffic passes

Technical Details

Protocol Architecture

Component Specification
Transport TCP
Encryption TLS 1.3
Port 443 (HTTPS)
Authentication Password-based
Traffic Pattern Indistinguishable from HTTPS

Security Features

  1. Full TLS Encryption: Same security as online banking
  2. Perfect Forward Secrecy: Past sessions can’t be decrypted
  3. No VPN Signature: Passes deep packet inspection
  4. Valid Certificates: Uses legitimate TLS certificates

Why Trojan Is Hard to Block

Blocking Trojan would require blocking all HTTPS traffic, which would break the internet:

Can a network block Trojan specifically? 
│
├── Block port 443? → Breaks ALL websites (impractical)
│
├── Block by IP? → Trojan servers have clean IPs
│                   (not on blocklists)
│
├── DPI inspection? → Traffic is genuine TLS
│                      (no VPN markers to detect)
│
└── Certificate check? → Uses valid certificates

Performance Characteristics

Speed Comparison

Protocol Relative Speed Latency Compatibility
AnyTLS 100% Low Excellent
Hysteria2 120-150% Very Low Good
Trojan 70-85% Medium Excellent+

Why Trojan Is Slower

  1. TCP-only: No UDP optimization
  2. Full TLS overhead: Every packet encrypted
  3. Single stream: Less efficient multiplexing
  4. Conservative design: Prioritizes stealth over speed

When Speed Doesn’t Matter

Trojan is still plenty fast for:

  • Web browsing (email, news, social media)
  • Standard video streaming (1080p)
  • Messaging apps
  • Remote work basics

How to Switch to Trojan

On FreeGuard PC

  1. Open FreeGuard VPN
  2. Go to Settings
  3. Find VPN Protocol
  4. Select Trojan
  5. Click Save
  6. Reconnect to the VPN

Quick Switch Method

If your primary protocol stops working:

  1. Disconnect from VPN
  2. Switch to Trojan in settings
  3. Reconnect
  4. Test with a website like ipinfo.io

Troubleshooting with Trojan

Trojan Won’t Connect Either

If even Trojan fails:

  1. Check basic internet: Can you browse without VPN?
  2. Try different servers: Some may be blocked by IP
  3. DNS issues: Try changing DNS settings
  4. Contact support: Network may have advanced blocking

Very Slow Speeds

Trojan is slower by design, but if unusually slow:

  1. Try closer servers: Distance matters more with TCP
  2. Check network congestion: Test at different times
  3. Server load: Try servers with lower user count

Intermittent Disconnections

  1. Network stability: Trojan is sensitive to packet loss
  2. Enable auto-reconnect: In FreeGuard settings
  3. Try wired connection: More stable than Wi-Fi

Comparison: When to Use Each Protocol

Situation Recommended Protocol
Normal browsing AnyTLS
Gaming/streaming Hysteria2
Restricted network Trojan
AnyTLS blocked Trojan
Hysteria2 blocked AnyTLS, then Trojan
Maximum stealth Trojan
Maximum speed Hysteria2

Trojan vs Other Stealth Protocols

Trojan vs AnyTLS

Aspect Trojan AnyTLS
Stealth Excellent Excellent
Speed Moderate Good
Detection Resistance Highest Very High
Server Efficiency Lower Higher
Best For Blocked networks Daily use

Summary: AnyTLS is better for normal conditions; Trojan is better when AnyTLS is blocked.

Trojan vs Shadowsocks

Aspect Trojan Shadowsocks
Protocol Full TLS Custom encryption
Detection Harder to detect Easier to fingerprint
Setup Simpler More complex
Maturity Newer Well-established

Summary: Trojan’s full TLS implementation makes it more resistant to modern detection.

Best Practices for Restricted Networks

Before Travel

  1. Install FreeGuard and verify it works
  2. Test all three protocols before leaving
  3. Note server addresses you can connect to
  4. Download offline materials as backup

While on Restricted Networks

  1. Start with Trojan if you expect blocking
  2. Use nearby servers for better speeds
  3. Keep connection active to avoid re-authentication
  4. Have mobile data backup if Wi-Fi fails

Security Considerations

  • Keep FreeGuard updated for latest stealth improvements
  • Don’t discuss VPN usage on unsecured channels
  • Comply with local laws and regulations
  • Use private browsing alongside VPN

Frequently Asked Questions

VPN legality varies by country. Trojan itself is just a protocol — it’s how you use it that matters. Always comply with local laws.

Can Trojan be detected by sophisticated systems?

While extremely difficult, no stealth method is 100% undetectable. Trojan represents the current best practice for evading detection.

Should I always use Trojan for maximum privacy?

No. For privacy on normal networks, AnyTLS provides the same encryption with better speed. Use Trojan when stealth from network operators is needed.

Does Trojan hide my activity from FreeGuard?

Trojan encrypts traffic between you and FreeGuard servers. FreeGuard maintains a no-logs policy, meaning your browsing isn’t recorded regardless of protocol.

Why not make Trojan the default?

AnyTLS offers better performance for most users. Trojan’s stealth comes at a speed cost that isn’t necessary on unrestricted networks.

Can I use Trojan for streaming?

Yes, Trojan handles 1080p streaming fine. For 4K, you may want Hysteria2 if your network allows it.

Next Steps


Last updated: January 2026