Glossary

This page explains the terms you meet in Throne, one sentence each. Follow the link in the last column to learn more.

Profiles and groups

Term	Meaning	More
Profile	One server or proxy entry in the list, with its protocol, address and settings.	Quick Start
Group	A tab of the main window that holds profiles; a group is either Basic (you add the profiles) or Subscription (filled from a URL).	Subscriptions & Groups
Subscription	A URL from your provider that returns a list of profiles, which Throne downloads into a group and can update later.	Subscriptions & Groups
Share link	A one-line link for one profile, such as vless://… or ss://…, that other apps also understand.	Protocols & Import Formats
Deep link	A throne:// link that tells Throne to do something, such as add a subscription or a routing profile.	Deep Links
Throne link	A throne://add/… deep link that carries one profile; you get it with Copy links of selected (Deep Links).	Deep Links
Chain	A profile of the type Chain Proxy that sends traffic through several profiles one after another.	Proxy Chains & Custom Configs
Front / landing proxy	Group options that add one extra profile before (front) or after (landing) every profile of the group.	Proxy Chains & Custom Configs
Auto selector	A profile type that tests the servers of a group and uses the best ones automatically.	Testing & Auto Selector
URL test	A latency test that opens the Latency Test URL through a profile and measures how long it takes.	Testing & Auto Selector

Core and connection modes

Term	Meaning	More
Core	ThroneCore, the background program that carries your traffic; the Throne window only controls it.	What is Throne
sing-box	The open-source engine that ThroneCore is built on; it handles TUN mode, routing, DNS and most protocols.	sing-box vs Xray
Xray	A second engine that runs inside the core for VLESS (Xray) profiles and Xray configs.	sing-box vs Xray
Inbound	A way for traffic to enter Throne: the mixed port, the TUN adapter, or a custom inbound.	Inbound settings
Outbound	A way for traffic to leave Throne: through a profile (proxy), directly, or not at all (block).	Routing
Mixed port	The local port that accepts both SOCKS5 and HTTP proxy connections, 127.0.0.1:2080 by default.	Inbound settings
System proxy	The System Proxy mode, which points the proxy setting of your system to the mixed port, so apps that follow this setting use Throne.	System proxy
TUN	The Tun Mode, which creates a virtual network adapter so that the traffic of all apps passes through Throne.	TUN Mode
Stack	How TUN mode handles packets: system (the network stack of your system), gvisor (a stack built into the core) or mixed (system for TCP, gVisor for UDP).	TUN settings
Strict route	A TUN option that stops traffic from going around the tunnel; on Windows 10 and later it is on by default.	Windows DNS Leak Protection
MTU	The largest packet size of the TUN adapter: 1500 by default on the desktop, 9000 on Android.	TUN settings

Routing and DNS

Term	Meaning	More
Routing profile	A named set of rules plus a default outbound; exactly one routing profile is active at a time.	Routing
Rule	A condition, such as a domain, an IP range, a rule-set or a program, and what to do with matching connections; rules are checked from top to bottom.	Routing
Rule-set	A ready-made list of domains (geosite-…) or IP ranges (geoip-…) for rules, downloaded as a binary .srs file.	Rule-sets
Default outbound	Where a connection goes when no rule matches: proxy, direct, block or warp-bypass.	Routing
Direct	The connection goes out through your normal internet connection, without a proxy.	Routing
Block	The connection is refused.	Routing
warp-bypass	The connection goes through your profile but skips WARP, when WARP is on.	Cloudflare WARP
Remote routing profile	A routing profile that Throne downloads from a URL and can update automatically.	Remote profiles
Sniffing	Throne reads the domain name from the start of a connection, so domain rules also work when an app connects to an IP address.	Routing
DNS routing	The option Enable DNS Routing: domains that match your direct rules are resolved with direct DNS, and all other queries go to the Default DNS server (remote by default).	DNS
Remote DNS / direct DNS	Remote DNS (by default https://8.8.8.8/dns-query) is used through the proxy and is the default server; direct DNS (by default localhost, your system's resolver) is used without the proxy, answers for domains that match direct rules and looks up the addresses of your servers.	DNS settings
FakeIP	A DNS mode, off by default, that answers with temporary fake addresses and maps them back to the real domain names.	FakeIP

Protocols and anti-censorship

Term	Meaning	More
Reality	A security option for VLESS that makes the connection look like a visit to a real, unrelated website.	sing-box vs Xray
XHTTP	An Xray transport that carries the connection inside ordinary HTTP requests.	sing-box vs Xray
uTLS	Makes the TLS handshake look like the handshake of a common browser, such as Chrome.	Anti-Censorship Presets
ECH	Encrypted Client Hello, which hides the server name inside the TLS handshake.	Anti-Censorship Presets
TLS fragment	Splits the first TLS message (the Client Hello) into small pieces to get past some censorship filters.	Anti-Censorship Presets
Multiplex (mux)	Carries many connections inside one connection to the server, with smux, h2mux or yamux.	Anti-Censorship Presets
WARP	The free VPN service of Cloudflare, which Throne can add as the last hop after your profile.	Cloudflare WARP
MASQUE	A tunnel protocol over HTTP/3 or HTTP/2; Throne has a MASQUE profile type, and WARP can use it.	Cloudflare WARP

Privacy, files and security

Term	Meaning	More
HWID	A hardware ID that some providers ask for; Throne sends it only if you turn it on.	Privacy & Network Requests
OTP	One-time passwords (TOTP or HOTP codes) that some OpenVPN and OpenConnect servers ask for; Throne keeps them in Tools → OTP Manager.	OTP Manager
.thrbackup	The backup file of Throne; both the desktop and the Android app can create and restore it.	Backup and restore
Portable mode	Throne keeps its data in a config folder next to the program instead of in your user folder.	Data folder