ShadowrocketSetup & User Guide

Route requests by rule match order

Rule-based routing determines which path each request takes. In Config, check the active Rule section: DOMAIN-SUFFIX matches domain suffixes, GEOIP matches the region associated with a destination IP, and FINAL catches requests that do not match earlier rules. PROXY, DIRECT, and REJECT send requests through a proxy, connect directly, or reject them. Rules are evaluated from top to bottom, so put more specific conditions before broader ones. Keep a copy of the original configuration before editing and test one destination at a time. The example on the right shows syntax; it is not a complete configuration for every network.

Having a rule in the file does not mean it is active. Return to Home and check that Global Routing is set to Config, and that this is the configuration file currently in use. If a destination still takes the wrong path, first check whether an earlier rule matches it; do not keep adding duplicate entries at the end of the file.

Understand Config, Proxy, and Direct

Global Routing determines the overall connection method. Config routes traffic according to the active configuration, Proxy sends requests through the selected proxy, and Direct connects without a proxy. Choose Config for everyday use with rules. To troubleshoot a specific request, temporarily switch to Proxy or Direct for comparison, record the result, then restore the original selection. Changing modes does not fill in server details or fix an expired subscription. If the connection switch is on but a destination remains unreachable, check the selected server, configuration file, and mode together instead of repeatedly switching the same option.

Add an existing subscription in Home

Get the subscription link from your service provider. In Home, tap + in the top-right corner, open Add Server, set Type to Subscribe, paste the complete link, and save. After importing, check that servers appear under SERVER, then select one and test the connection. Subscribe updates the server list; it does not automatically configure all routing rules. A link may contain access credentials, so keep all of its parameters intact but do not share it in public comments or screenshots. If an update fails, first check the copied text, your current network, and the subscription status provided by your service provider.

For details about a single server, enter them in Add Server according to its protocol instead of treating the server address as a subscription link. The list may change after a subscription update, so confirm the selected server again before testing. You can share the error text needed to explain the issue without sharing the complete link. There is no need to delete all configurations while troubleshooting.

Distinguish the server list from configuration files

Config manages configuration files, where you can inspect sections such as General, Rule, and Hosts. The server list tells you where to connect; the configuration file tells you how requests are handled. Check them separately. Before replacing a configuration, save the original and confirm that the new file refers to existing policies. If you use iCloud sync, first check iCloud permissions in the system and the sync settings in the app, then verify the actual content on the other device. Syncing does not guarantee that connection settings suit a new network, and it does not replace checking purchase records or subscription validity.

Test manually before setting up On Demand

On Demand triggers connections when specified conditions are met. First make a manual connection from Home and verify that you can access the destination. Then check the conditions under On Demand in Settings so automatic triggers do not mask server or rule issues. If a connection starts again after you turn off the switch, first check whether On Demand conditions are still being met rather than immediately deleting the app. Test on both Wi-Fi and mobile networks after changing conditions. On Demand controls when a connection starts; Global Routing still determines how requests are handled.

Support for multiple protocols does not mean you can choose any Type at random. Shadowsocks, VMess, VLESS, Trojan, Hysteria2, and WireGuard use different parameter formats. Select the protocol and enter the fields according to the information from your service provider. If a field is unclear, confirm its source instead of guessing with parameters from another protocol or relying on the server name.

Check connectivity, requests, and traffic separately

The connection switch, Connectivity Test, and access to an actual webpage each show a different aspect of connection status. First confirm that the device itself is online, then test the selected server and check the destination request and its rules. Diagnostics in Settings can collect diagnostic information; Data shows traffic records, but traffic changes alone do not prove that every request is routed through a proxy. Change one setting at a time while recording the network type, Global Routing selection, and failure. Before sharing diagnostic information, remove subscription links, server credentials, and other private details.