REFERENCE / GLOSSARYUse the wording shown in the app and on the App Store page
Find English interface labels, protocol names, and rule keywords by task. Learn what each term does in a configuration. Available options, fields, and system requirements are determined by the current app and the App Store listing.
LOOKUP / BROWSE BY CATEGORY
When reading rules, check the match condition first, then the action at the end of the line. When reviewing connection results, distinguish server connectivity from whether a specific request matched the intended rule.
Identify the screen and current status before changing how a connection is handled. Interface layout may vary with available screen space; use the labels shown in the app.
Home is the starting point for checking connection status and seeing which server is selected. When troubleshooting, note the status here first, then decide whether to check server details or rules. The device status-bar icon alone cannot tell you how a particular request was handled.
Global Routing controls the overall handling mode. Common options are Config (follow configuration rules), Proxy (use the currently selected server), and Direct (connect directly). To check whether rules are working, first confirm that Config is selected. Changing modes alters how requests are handled; it does not modify subscription content.
As a Global Routing option, Config applies the rules in the currently selected configuration to requests. Each request is evaluated against the configured conditions and handled according to the matching action. If the result is unexpected, check the selected configuration, rule order, and the final FINAL rule.
As a Global Routing option, Proxy sends requests through the currently selected server, which can help temporarily rule out the effects of routing rules. It still depends on correct server settings and a working connection. Passing a test in Proxy does not mean every rule in Config is correct.
As a Global Routing option, Direct connects requests to their destinations without using the currently selected server. It can help compare results across handling modes. This overall Direct option is distinct from the DIRECT action at the end of an individual rule.
On Demand uses predefined network conditions to decide when to connect, making it useful when connection status should change with the network. It controls when a connection is triggered; it does not select a reliable server or fix rules for you. After enabling it, test the triggers on the networks you actually use.
Data displays the usage figures shown by the app, which can help you observe changes during a connection. Check the page notes and current settings to understand the measurement period. These figures are not a general measure of remaining service allowance, so they cannot establish the status of a subscription on their own.
Protocols define how two endpoints exchange data. The names below are not server addresses. When entering details, verify the protocol and all required parameters against the server information you already have.
Shadowsocks connects using the address, port, encryption method, and credentials specified by the server. When importing existing details, make sure the protocol and encryption settings match the server. Copying a server name is no substitute for checking the connection fields.
VMess is a connection protocol that requires the identity and transport parameters provided by the server. A share link may contain multiple settings; after importing, check that all fields are present. If the connection fails, compare the parameters at both ends instead of relying on the name shown in the list.
VLESS connection details include an identity, transport method, and any security parameters in use. It is a different protocol from VMess; changing the displayed name does not make the two interchangeable. Select the protocol and enter the corresponding fields based on the server details you already have.
A Trojan configuration typically requires checking the server, port, credentials, and TLS-related parameters. A mismatch in the domain, certificate mapping, or transport settings can cause the handshake to fail. Comparing each field with the original server details is more direct than repeatedly switching Global Routing modes.
Hysteria2 uses QUIC transport. Check the address, authentication details, and transport parameters provided by the server when configuring it. Two configurations are not interchangeable just because they use the same protocol name. If a test fails, first confirm that both sides use the same parameters, then check connectivity on the current network.
WireGuard connection details use fields such as keys, addresses, and Endpoint. The public and private keys have different roles. When entering details manually, do not swap fields or substitute a test example for the actual configuration. To troubleshoot a handshake, check the key pairing, Endpoint, and network reachability separately.
A rule line typically consists of a match condition and an action. The domains below are syntax examples only; they are not ready-to-use servers or complete configurations.
DOMAIN-SUFFIX matches a domain suffix, making it useful for applying the same action to a domain and its related subdomains. Confirm that the scope is what you intend. Do not infer the request domain from a page’s display name; use the demonstration domain to understand the syntax.
DOMAIN-SUFFIX,example.com,PROXYDOMAIN-KEYWORD checks whether a domain contains a specified text string, and may match more broadly than an exact domain rule. A common keyword may also match unrelated domains. Before adding one, identify what you intend to match and verify the result in Config.
DOMAIN-KEYWORD,example,DIRECTGEOIP matches based on geographic IP data for the destination, not the language of a webpage or the domain suffix. The resolved address and data used can affect the result. To match a specific domain precisely, distinguish GEOIP rules from domain-based rules.
GEOIP,CN,DIRECTIP-CIDR matches requests by IPv4 address range; the number after the slash indicates the range size. It matches addresses, not domain text. When troubleshooting, first confirm the address the destination resolves to, then check whether the rule’s range should match it.
IP-CIDR,192.0.2.0/24,DIRECTFINAL is the fallback for requests not handled by earlier rules and is usually placed at the end of the rule list. It determines what happens to all remaining requests, so changing one domain rule may not explain the results for all traffic. When checking a configuration, read through to the last line.
FINAL,DIRECTThese three uppercase terms are actions at the end of a rule: PROXY sends the request through the specified proxy, DIRECT connects directly, and REJECT denies the request. They describe what happens when a rule matches and are distinct from the three overall options at the top of Global Routing. Before writing a rule, decide how matching requests should be handled.
This section assumes you already have a subscription or server details. A one-time app purchase is not a service plan; purchasing the app and obtaining connection details are separate things.
Subscribe imports and updates subscription content you already have; get the link from your own service provider. It typically contains a set of connection details that can be updated. A successful import only means the content was read; you still need to select a server and test the connection. If an update fails, first check that the link is still valid and accessible on your current network.
Add Server is the entry point for manually entering details for a single server you already have. After choosing a protocol, enter the address, port, and corresponding parameters provided by the server. Unlike Subscribe, an individual server entry is not updated periodically; check the saved details if the original parameters change.
Scan QR Code uses the camera to read details from an existing configuration QR code, reducing errors from manual entry. After scanning, check the detected protocol and key fields before testing the connection. A QR code carries information; it does not prove that the server it describes is reachable.
URL Rewrite changes how request URLs are handled according to configured conditions. It is a more granular request-handling setting than choosing a server. Before enabling a rule, understand its matching scope and intended result. If requests from a particular page behave unexpectedly, check whether a rewrite rule is involved.
A single test only describes the result for its target at that moment. When something goes wrong, check resolution, server parameters, the Global Routing mode, and rule matches in that order.
DNS resolves domain names to addresses needed for subsequent connections. DNS settings can affect the results you see with domain-based and address-based rules. After changing DNS, check separately whether the domain resolves and whether requests use the intended action. A failed connection is not always caused by server parameters.
Connectivity Test sends a test request to check whether the currently selected connection is available. Passing the test does not mean requests from every website and app will match the same rule. If only specific requests fail, first confirm that the server connects, then check the match conditions in Config.
Latency is the time from sending a test request to receiving a response, and can help compare results under the same test conditions. It varies with the current network, test target, and connection status, and is not the same as transfer speed. A single reading does not indicate how the entire connection performs.
Use the glossary to understand settings. For practical setup, check the official listing, import details you already have, select a Global Routing mode, and verify the connection in that order.
Check the developer, Shadow Launch Technology Limited, the official icon, and app ID 932747118. Find out how to get the app on iPhone and iPad.
Read how to verify the official listing →If you already have a subscription or server details, follow the sequence: import, choose a handling mode, connect, and test. This helps avoid switching between screens to find each step.
View the guide →Shadowrocket is a paid app for Apple platforms. The only official source is the App Store listing. Check the App Store page for device compatibility and system requirements. This site is an official manual.