This article addresses common questions about “how to use Shadowrocket”: how to import nodes or subscriptions on an iPhone/iPad, enable the proxy, and why IP, DNS, and the browser environment can affect access results. It is suitable for ordinary users who have just installed Shadowrocket, still cannot open web pages after connecting, or are concerned about DNS leaks.
1. First, understand the basics of using Shadowrocket after installation
Shadowrocket, often called the “little rocket,” is a commonly used proxy client on iOS. It can import nodes such as V2Ray, VLESS, Trojan, and Shadowsocks, and it also supports subscription links. It does not provide线路 itself, so you need to prepare available nodes; you can use your existing subscription, or refer to the free nodes compiled on this site for testing, though the stability of free nodes may fluctuate.
- Open Shadowrocket, go to the home page, and tap the “+” in the upper right corner.
- If it is a single node, choose the corresponding type and fill in the server, port, UUID/password, TLS, and other information.
- If it is a subscription, choose “Subscribe/Subscription,” paste the subscription link, save it, and then tap update.
- Return to the home page, select a node, and turn on the switch at the top.
- When enabling it for the first time, you will be prompted to add a VPN configuration. Tap Allow and enter your system password.
After a successful connection, the VPN icon will usually appear at the top of iOS. At this point, you can open a browser and visit an IP lookup website to confirm whether the exit IP has changed. If the IP has not changed, first check whether you selected the correct node and whether global or rule-based proxy mode is enabled.
2. What IP, DNS, and the browser environment each affect
IP is the exit address seen by websites, determining the region, carrier, and risk characteristics displayed when you visit. After Shadowrocket connects, general web traffic will usually access sites through the node’s exit IP. If some apps still show your local region, the rules may not be proxying them, the app may be using location permissions, or the cache may not have refreshed.
DNS is responsible for resolving domain names into IP addresses. If DNS does not go through the proxy, you may encounter a situation where “the IP has changed but the DNS is still local,” causing some websites to judge the environment as abnormal. In Shadowrocket, you can use remote DNS in the configuration or enable anti-leak-related options. For ordinary users, it is recommended to stick to the default rules and avoid casually adding unknown DNS servers.
Browser environment includes language, time zone, cookies, cache, WebRTC, location permissions, and more. Even if the proxy connection is working properly, saved login records, region cookies, or location authorization in the browser may still cause websites to display the original region. When troubleshooting, you can test in private/incognito mode and clear site data if necessary.
3. Recommended settings for everyday use
- Beginners should prioritize using “Rule Mode”: domestic websites connect directly, while overseas websites go through the proxy, balancing speed and stability.
- When testing whether a node is usable, you can temporarily switch to “Global Mode” to confirm that all traffic is going through the proxy.
- After importing a subscription, tap update regularly to avoid continuing to use old configurations after nodes become invalid.
- Do not enable multiple VPN/proxy tools at the same time, to avoid routing conflicts.
If you only want to access common websites, you usually do not need complicated settings: import the subscription, select a node, turn on the switch, and test with a browser. If you encounter abnormalities, then check the three areas one by one: IP, DNS, and browser cache.
4. Troubleshooting connection failures and environmental abnormalities
If Shadowrocket shows as connected but web pages will not open, first switch to other nodes for testing. If none of the nodes work, check whether the network is functioning normally, whether the subscription has expired, and whether the system time is accurate. If only some websites will not open, it may be a rule issue, and you can temporarily switch to Global Mode to verify.
If you see prompts about TLS, certificates, or handshake failure, the node parameters most likely do not match or the route has failed; updating the subscription again is usually the easiest fix. If the IP lookup appears normal but the webpage still says the region does not match, it is recommended to disable browser location permissions, clear cookies, and test again in an incognito window. Note that Shadowrocket changes the network exit, but that does not mean it completely changes the device identity; browser fingerprints and account history may still affect recognition results.
In summary: the core operations in Shadowrocket are importing nodes, selecting a proxy mode, and enabling the connection; advanced troubleshooting then focuses on whether the IP has changed, whether DNS is leaking, and whether the browser environment still contains residual data. By following the steps above, most “connected but unusable” problems can be traced to their cause.