This article addresses the practical question of “how to use Shadowrocket”: how to import nodes or subscriptions on iPhone/iPad, enable the proxy, and understand the relationship between IP, DNS, and the browser environment, so as to avoid common issues such as being able to connect but not open web pages, abnormal IP display, and DNS leaks.
1. Basic Shadowrocket Usage Process
Shadowrocket is often called “Little Rocket” by Chinese-speaking users. It is a commonly used proxy client on iOS and supports various node formats such as Vmess, VLESS, Trojan, and Shadowsocks. Before using it, you need to prepare working nodes or a subscription link. This site also compiles some free nodes for testing, but the stability of free resources may vary, so it is recommended to prepare several backups.
- Open Shadowrocket and tap the “+” in the upper-right corner.
- If it is a subscription link, choose “Type/Subscribe” or “Import from URL,” then paste the subscription address and save it.
- If it is a single node, you can copy links such as vmess://, vless://, trojan://, etc. After returning to Shadowrocket, it will usually recognize them automatically, or you can add them manually.
- After importing, tap the node name and choose one with lower latency that can connect properly.
- Return to the home page, turn on the connection switch at the top, and when using it for the first time, follow the prompt to allow the VPN configuration to be added.
After a successful connection, a VPN indicator will appear in the status bar. At this point, your network requests will go through the proxy or connect directly according to the rules. Whether everything is proxied depends on the configuration mode.
2. What IP, DNS, and Browser Environment Each Affect
IP is the outbound address that websites see. After Shadowrocket is connected, if the rules are set to global proxy, most websites will show the IP of the node’s region; if split-routing mode is used, domestic websites may still show your local network IP, which is normal.
DNS is used to resolve domain names into server addresses. If the DNS settings are unsuitable, you may encounter situations where Telegram works but web pages do not open, or where detection websites show that DNS does not match the proxy region. Ordinary users can enable common remote DNS/encrypted DNS in Shadowrocket settings to avoid interference from the ISP’s DNS.
Browser environment includes information such as language, time zone, cache, cookies, and WebRTC. Even if your IP has changed, the browser may still expose your original environment through old cookies or location permissions. For test accounts, cross-region access, or privacy-sensitive scenarios, it is recommended to use an incognito window, disable location permissions, and clear the relevant site cache.
3. Recommended Basic Settings
- Beginners should prioritize using “Config/Rule” mode. Long-term global proxy is not recommended, as it may slow down domestic apps.
- If subscription updates fail, first switch networks, then manually update on the subscription page.
- When testing IP, you can open a browser and visit an IP lookup website to check whether the IP, DNS, and time zone match expectations.
- If the same node cannot connect, do not keep toggling it on and off repeatedly; switch to another node or update the subscription first.
If you only need routine access to the external internet, usually keeping “rule-based split routing + a working node + normal DNS” is enough. If you encounter website risk control, do not look only at the IP; also check the browser language, time zone, and the account’s historical environment.
4. Troubleshooting Connection Failures
If Shadowrocket cannot connect, first confirm that the phone’s network itself is working, for example by switching between Wi-Fi and cellular data for testing. Next, check whether the node has expired, whether the subscription has been updated, and whether the system time is correct. Some protocols are sensitive to time differences, and inaccurate time can cause handshake failures.
If it shows as connected but web pages will not open, you can try three steps: switch to another node; change the DNS settings; switch the proxy mode from global to rule-based, or from rule-based to global, for testing. If some apps work but some websites do not, it is most likely a rules or DNS issue. Finally, restarting Shadowrocket and deleting the old VPN configuration before reauthorizing can also resolve some system-level issues.
In summary, the core of using Shadowrocket is importing nodes, choosing a mode, enabling the connection, and checking the IP/DNS/browser environment. By following the above process, ordinary users can basically handle routine access and troubleshooting.