diff --git a/common/builder/inbound.go b/common/builder/inbound.go
index e7597fd..08f982a 100644
--- a/common/builder/inbound.go
+++ b/common/builder/inbound.go
@@ -114,6 +114,7 @@ func BuildInbound(config *conf.ControllerConfig, nodeInfo *panel.NodeInfo, tag s
 		config.EnableProxyProtocol {
 		sockoptConfig := &coreConf.SocketConfig{
 			AcceptProxyProtocol: config.EnableProxyProtocol,
+			TFO:                 config.EnableTFO,
 		} //Enable proxy protocol
 		in.StreamSetting.SocketSettings = sockoptConfig
 	}
diff --git a/conf/node.go b/conf/node.go
index ab561a5..4deac93 100644
--- a/conf/node.go
+++ b/conf/node.go
@@ -25,6 +25,7 @@ type ControllerConfig struct {
 	DisableUploadTraffic bool             `yaml:"DisableUploadTraffic"`
 	DisableGetRule       bool             `yaml:"DisableGetRule"`
 	EnableProxyProtocol  bool             `yaml:"EnableProxyProtocol"`
+	EnableTFO            bool             `yaml:"EnableTFO"`
 	DisableIVCheck       bool             `yaml:"DisableIVCheck"`
 	DisableSniffing      bool             `yaml:"DisableSniffing"`
 	EnableFallback       bool             `yaml:"EnableFallback"`
diff --git a/example/config.yml.example b/example/config.yml.example
index aa1841c..3ab664b 100644
--- a/example/config.yml.example
+++ b/example/config.yml.example
@@ -25,9 +25,10 @@ Nodes:
       SendIP: 0.0.0.0 # IP address you want to send pacakage
       EnableDNS: false # Use custom DNS config, Please ensure that you set the dns.json well
       DNSType: AsIs # AsIs, UseIP, UseIPv4, UseIPv6, DNS strategy
+      EnableTFO: false # Enable TCP Fast Open
       EnableVless: false # Enable Vless for V2ray Type
-      EnableProxyProtocol: false # Only works for WebSocket and TCP
       EnableXtls: false  # Enable xtls-rprx-vision, only vless
+      EnableProxyProtocol: false # Only works for WebSocket and TCP
       EnableFallback: false # Only support for Trojan and Vless
       FallBackConfigs: # Support multiple fallbacks
         - SNI: # TLS SNI(Server Name Indication), Empty for any