This article addresses the practical question of “how to use Shadowrocket”: after installing it on your iPhone/iPad, how to import nodes or subscriptions, enable the proxy, and why you still need to pay attention to IP, DNS, and the browser environment after connecting. It is suitable for ordinary users who are new to bypassing internet restrictions and want to follow step-by-step instructions.
1. Basic Shadowrocket Usage Flow
Shadowrocket, often called “Little Rocket” by Chinese users, is a commonly used proxy client on iOS that supports popular protocols such as Shadowsocks, Vmess, VLESS, and Trojan. It is only a client itself; whether it can connect depends on whether the nodes you import are available. This site organizes free nodes and subscription information, and you can also use your own existing provider subscription.
- Open Shadowrocket and, on first use, allow it to add a VPN configuration;
- Tap the “+” in the upper-right corner, choose “Type,” and manually enter the server, port, password, encryption method, and other information;
- If what you received is a subscription link, go to the relevant “Configuration” or “Subscription” section, paste the URL, and update it;
- Return to the home page, select a node, and turn on the switch at the top;
- When the system prompts for VPN permission, tap Allow. Once the VPN icon appears in the status bar, it means the network has been taken over.
For beginners, using a subscription link is more recommended, because when nodes expire you can update the list directly. If you have a single node link, you can also copy it and return to Shadowrocket; it will usually recognize and import it automatically.
2. How to Tell Whether It Is Working After Connecting
Turning on Shadowrocket does not mean all websites will immediately become accessible, so it is recommended to do three checks first. First, open an IP lookup website and confirm whether the displayed exit IP has changed to the region where the node is located. Second, visit the target website and see whether it loads properly. Third, check the Shadowrocket logs to see whether there are connection failures, timeouts, or authentication errors.
IP represents the network exit you present to the outside world. If it still shows your local ISP IP, it usually means the rule was not matched, the VPN was not enabled, or the node is unavailable. You can temporarily switch the mode to “Global Proxy” for testing. If global mode works but rule mode does not, the issue is most likely with the routing rules.
3. What Is the Relationship Between DNS and the Browser Environment
DNS is the process of resolving a domain name into an IP address. Sometimes a node can connect but web pages still will not open, which may be due to DNS pollution, slow resolution, or unsuitable rule settings. In Shadowrocket, you can use remote DNS or follow the DNS settings in the configuration file; ordinary users do not need to frequently change advanced parameters, and updating subscriptions and rules should be the priority.
The browser environment can also affect the experience. Websites may read information such as language, time zone, cache, cookies, and WebRTC. For example, if your exit IP is overseas but your browser language is still Chinese and your time zone is still Beijing time, some platforms may regard the environment as inconsistent. This is usually not a big issue for everyday browsing, but if you are logging into sensitive accounts, it is recommended to keep the environment stable and avoid frequently switching node countries.
- Do not change node regions too frequently, especially when logging into the same account multiple times in a short period;
- If access is abnormal, clear the browser cache first, or test in incognito mode;
- If you are concerned about WebRTC leaks, you can disable the relevant features in browser settings or plugins;
- Try to keep DNS, IP, browser language, and time zone logically consistent.
4. Troubleshooting Common Connection Failures
If Shadowrocket cannot connect, do not keep reinstalling it repeatedly. Check in order: whether the node has expired or been blocked, whether the subscription was updated successfully, whether the phone’s network is working normally, whether another VPN is enabled, and whether the date and time are set to sync automatically. A timeout in the logs usually means the route is unreachable; auth failed usually means the password or parameters are incorrect; if it connects but is very slow, the node may be congested or far away.
The simplest troubleshooting method is to switch between 2–3 nodes, update the subscription once, and then test again in global mode. If all of them fail, the subscription source may be invalid. If only certain websites fail, the issue is most likely with the rules or DNS. Free nodes have limited stability, so it is recommended to bookmark usable nodes as backups to avoid having no available node when you need one temporarily.