What is an MTProto proxy, and how do you use it with Telegram?

What an MTProto proxy is

MTProto is the protocol Telegram apps use to talk to Telegram's servers. An MTProto proxy, often called MTProxy, is a server that sits in between and relays that traffic. Support for it is built into Telegram itself, so there is no extra app to install.

Telegram added proxy support so that people could keep using it on networks where direct connections are unreliable. The proxy receives your app's connection and passes it on to Telegram. From your network's point of view, you are talking to the proxy, not to Telegram's servers.

The important word is "Telegram". The proxy only handles traffic from the Telegram app that is set up to use it. It is one of DXVPN's protocols (up to 7; availability can vary by server), but it works very differently from the others.

Why it is not a VPN

A VPN routes traffic from your whole device, or from the apps you choose, through an encrypted tunnel. An MTProto proxy does not. It is a setting inside one app.

That makes the two complementary rather than competing. The proxy is a light option for people who mainly need Telegram. A VPN protocol is what you use for everything else. See how to choose a VPN protocol for the others.

How fake-TLS works

Early MTProto proxies used an obfuscated stream that looked like random bytes. That hides the content, but random-looking traffic can itself stand out to deep packet inspection. Fake-TLS was introduced to address this.

In fake-TLS mode, the connection to the proxy starts with something that looks like a TLS handshake to a named website. The proxy secret carries that website's name along with the key. To a passive observer, the start of the session looks much like an ordinary HTTPS connection. mtg, the open-source proxy DXVPN uses, supports fake-TLS. DXVPN's own rating for MTProto's DPI resistance is 5 out of 5, but like any rating it describes how hard the traffic is to fingerprint, not a guarantee. For background, read what deep packet inspection is.

How to add a proxy in Telegram

There are two ways. Both are part of Telegram's standard settings, although menu names can vary slightly between app versions and platforms.

From a link. The easiest way. A proxy link starts with tg://proxy or https://t.me/proxy and contains the server, port and secret.

1. Tap the link on a device where Telegram is installed.
2. Telegram opens and shows the proxy details.
3. Confirm to connect. Telegram saves the proxy and starts using it.

By hand. Useful when you only have the server, port and secret as text.

1. Open Telegram's Settings, then Data and Storage, then Proxy.
2. Choose to add a proxy and pick MTProto as the type.
3. Enter the server, port and secret, then save.

On desktop versions, proxy settings usually sit under the advanced or connection settings. To stop using the proxy, switch it off in the same menu. Telegram shows the connection state at the top of the chat list, so you can see whether it is connected.

Sharing it with family

A proxy link is easy to pass on, which makes it handy for relatives who only use Telegram and do not want to set up a VPN app. Send them the link in a private chat, they tap it, and they are done.

• Share privately. Anyone with the link can use the proxy. Keep it out of public groups and channels.
• Stay within your plan. The terms of service do not allow sharing beyond plan limits or reselling access.
• If it spreads too far, contact support through @dxvpnbot about a new link, as you would with any leaked credential.

Limits to keep in mind

• Only Telegram. Your browser, other messengers and every other app connect as usual, with no added protection.
• Only the app you set up. Each Telegram app on each device needs the proxy added separately.
• Calls may behave differently. Depending on the app version and network, voice and video calls may not go through the proxy.
• Not a privacy tool for everything. Telegram itself still handles your account and messages under its own policies.

MTProto proxy with DXVPN

DXVPN runs its MTProto proxy on mtg v2, an open-source engine, on servers it operates itself. The proxy is included on the Family and Business plans. Family costs 449 ₽ a month, covers up to 5 devices, and also includes up to 7 protocols (availability can vary by server), DNS filtering and priority support. See the pricing section for all plans.

You get the proxy link from your dashboard or from the Telegram bot @dxvpnbot, then add it as described above. For your other apps, use a VPN protocol from the same account; the features section shows what else is included.