Trojan

How it works

• TCP + TLS; password in the subscription.
• Self-signed TLS: skip-cert-verify / allowInsecure where required.
• Per node, not the default primary.

When to use it

• Your client only speaks Trojan.
• You want TLS look without Reality.

When to skip it

If Reality works, you do not need Trojan.

Clients

sing-box, Clash Meta, Trojan-specific apps. Watch the cert flag.