This article addresses the common question “How do I use Shadowrocket?”: how to import nodes or subscriptions on iPhone/iPad, enable the proxy, and why you should still pay attention to IP, DNS, and the browser environment after connecting. It is suitable for first-time users or users with unstable connections to troubleshoot step by step.
1. Basic Shadowrocket Usage Flow
Shadowrocket is a common proxy client on iOS. It does not provide routes by itself, so users need to import available nodes or subscription links. You can use your own existing subscription, or refer to this site’s free nodes page to obtain temporary test nodes. Before use, make sure the system network is working properly and the time is set to automatic.
- Install and open Shadowrocket, then on the home page tap the “+” in the upper-right corner.
- If it is a single node, choose the corresponding type, such as Vmess, VLESS, Trojan, SS, etc., and fill in the address, port, UUID/password, TLS, and other parameters according to the provided information.
- If it is a subscription link, choose “Type” as Subscribe, paste the subscription URL, save it, then tap the subscription item to update.
- Go back to the home page, select a node, turn on the connection switch at the top. The first time, you will be prompted to add a VPN configuration; tap Allow and enter your lock screen passcode.
- After the connection is successful, a VPN icon will appear in the status bar. Then open a browser to test webpage access.
If you are not sure about the node protocol, give priority to the “one-click import link” or QR code provided by the provider to avoid manual entry errors. After importing a subscription, it is recommended to update it once first to make sure you get the latest available configuration.
2. What Is the Relationship Between IP, DNS, and the Browser Environment?
Many people think everything is fine once Shadowrocket is turned on, but in fact the proxy effect is usually determined by three parts together: exit IP, DNS resolution, and the browser environment. The exit IP determines where the website thinks you are visiting from; DNS is responsible for resolving domain names into IPs; and the browser environment includes information such as language, time zone, cache, cookies, WebRTC, and more.
- IP:You can use an IP lookup website after connecting to confirm whether the exit has changed. If it still shows your local network, the traffic may not be going through the proxy rules, or the node connection may have failed.
- DNS:DNS leaks may cause websites or detection tools to see your local ISP’s resolution records. You can use remote DNS in Shadowrocket’s configuration, or enable related leak-prevention options.
- Browser:If old cookies, account region, language, or time zone differ greatly from the proxy region, some websites may still judge the environment as abnormal. You can try incognito mode, clearing the cache, or testing with another browser.
3. Recommended Rules and DNS Settings
For ordinary users, it is recommended not to start with global proxy mode right away. You can first use “Configuration/Rule Mode” so that domestic websites connect directly while overseas websites go through the proxy, which provides a more stable experience. If a certain website cannot be opened during testing, temporarily switch to global mode to determine whether it is a rules issue.
For DNS, go to the configuration profile settings in Shadowrocket and prioritize using reliable remote DNS to avoid access issues caused by local DNS resolution. Menu names may vary slightly between different versions, but the core idea is: proxy traffic should use proxy DNS, while domestic direct-connect traffic should use local or commonly used DNS. Do not casually mix and use configuration profiles from unknown sources, as this may cause rule conflicts.
4. Connection Failure Troubleshooting Checklist
If Shadowrocket shows as connected but webpages will not open, checking in the following order will save the most time:
- Make sure the phone’s Wi-Fi/cellular network itself can access the internet normally.
- Switch to other nodes under the same subscription to rule out failure of a single node.
- Update the subscription to avoid using expired node information.
- Check whether the system time is automatically synchronized; incorrect time can affect TLS connections.
- Switch the mode from rules to global for testing. If global works, the rules or DNS need adjustment.
- Turn the VPN off and back on again. If necessary, delete the system VPN configuration and re-authorize it.
In summary, the correct way to use Shadowrocket is not just to tap the switch once, but to “import available nodes, choose appropriate rules, check IP and DNS, and keep the browser environment consistent.” If you run into problems, first switch nodes, update the subscription, and then check DNS and rules; this will usually solve most connection issues.