hartl3y94 / trojan-rust

Yet another trojan-gfw in Rust

Trojan-rust

Yet another trojan-gfw implementation in Rust.

Features

• Server mode only (for now).
• Supports Redis auth & flow stat.
• Uses OpenSSL as crypto backend.
• Uses tokio as async runtime.

How trojan handles connections

• Not a TLS connection or TLS handshake failed: Connection Reset.
• SNI mismatch: Redirect to fallback
• Expected TLS but not a trojan request: Redirect to fallback.
• Trojan request but password incorrect: Redirect to fallback.
• Trojan request and password correct: Work as a proxy tunnel.

How the fallback server (usually) works

• Not HTTP Request: 400 Bad Request
• HTTP Request:
  • GET: 404 Not Found
  • Other: 405 Methon Not Allowed

This is like most cdn endpoints' behavior if you don't have a correct resource path.

Build

cargo build --release

Usage

USAGE:
    trojan-rust [OPTIONS]

FLAGS:
    -h, --help       Prints help information
    -V, --version    Prints version information

OPTIONS:
    -c, --config <config>          [default: config.toml]
        --log-level <log-level>    [env: LOGLEVEL=] [default: info]

Docker Image

docker run -p 443:443 llc1123/trojan-rust example.toml

Config

example.toml

# mode = "server" # optional

## uses default values if not present
# [trojan]
# password = [] # optional
## uses built-in if not present
# fallback = "baidu.com:80" # optional

[tls]
# listen = "0.0.0.0:443" # optional
# tcp_nodelay = false # optional
sni = "example.com" # required
cert = "fullchain.pem" # required
key = "privkey.pem" # required

## doesn't use redis if not present
# [redis]
# server = "127.0.0.1:6379" # optional

Redis Auth

Add a user:

HSET [sha224(password)] download 0 upload 0

Trojan-rust checks if the hash exists in redis on each connection. If true, the user is authenticated and the flow will be recorded.

Trojan-rust DOES NOT offer a method adding or removing a user. Please do it by yourself.

TODO

• Client mode
• TPROXY mode
• Benchmarks

Contributing

PRs welcome

License

Trojan-rust is MIT licensed.