Shadowrocket Setup Guide and Rules Manual

Match a Rule, Then Apply Its Policy

Global Routing determines how connections are handled. With Config selected, the client reads the active configuration and checks its rules from top to bottom, applying the policy for the first match. PROXY sends traffic through the selected server, DIRECT connects without a proxy, and REJECT blocks the request. Proxy and Direct modes do not route traffic through these individual rules. To troubleshoot a website's route, first check the mode and active configuration, then review rule order and the FINAL fallback. Changing rules alone will not help if Config is not enabled.

DOMAIN-SUFFIX,example.com,PROXY
IP-CIDR,192.168.0.0/16,DIRECT
FINAL,PROXY

Connect Automatically Under Set Conditions

On Demand automatically starts a connection when its configured conditions are met; it does not guarantee that a server is available. First connect manually from Home and verify access, then check the On Demand conditions in Settings. Test connecting and disconnecting on the networks you commonly use. If the connection starts again after you turn it off manually, review the trigger conditions instead of repeatedly deleting the configuration. To troubleshoot connection issues, pause automatic triggers and test with a fixed network and server. Once the connection works, restore the On Demand settings one at a time.

Settings → On Demand

Match the Protocol to the Required Fields

Shadowrocket supports several proxy protocols. When adding a server, choose Type based on the server details you already have rather than guessing from the protocol name. Shadowsocks, VMess, VLESS, Trojan, and Hysteria2 use different authentication and transport fields; changing Type at random will not convert an address to another protocol. In Add Server, check the address, port, authentication, and any additional transport parameters, then save and test the connection. If you import the details, verify that the result is complete. Available options depend on the current app interface.

• Shadowsocks
• VMess
• VLESS
• Trojan
• Hysteria2

Import an Existing Subscription, Then Check the List

A subscription imports and updates server details you already have. Get the complete link from your own provider, choose Subscribe in the add menu, and save it. Then check Home for the expected groups and servers. A link that opens is not necessarily a valid subscription the app can parse. If the list is empty, check that the link was copied in full, that it is not a web page URL, and that the subscription is still active. If an update fails, keep the existing entry, note the error, and check the network before trying anything else. Subscription links may contain account credentials; do not share them publicly.

Home → Add Server → Subscribe

Server Lists and Rule Configurations Are Different

Config manages configuration files, while the server list in Home provides connection endpoints to choose from. They serve different purposes. After importing a subscription, check which configuration is active and select Config in Global Routing to apply its rules. Keep a copy before editing, change one type of rule at a time, then save, confirm it is enabled, and test. For iCloud sync, check the app's sync options, device accounts, and whether all files have arrived. A file appearing on another device does not mean it is selected as the active configuration or that existing servers can still connect.

[General]
bypass-system = true

[Rule]
FINAL,PROXY

Check Connection Status Separately from Access Results

If you can't connect, first check that the system network is working. Then check the server selected in Home, the connection switch, and Global Routing. Connectivity Test can help assess connectivity, but its result does not guarantee that every app can access the network. Open Data to review traffic during the test, then use Diagnostics in Settings to investigate requests and connections. Increased traffic only indicates that data is being transferred; it does not prove the rules are correct. Change one condition at a time and record the error, network type, and scope of the failure to identify whether the cause is a setting, server, or rule.

Home → Connectivity Test
Data
Settings → Diagnostics