Shadowrocket is a rule-based proxy and network debugging client. It does not provide servers. What follows is what the software itself can do. For step-by-step use, see the tutorial. Product positioning is in About.
Traffic and debugging
Take over device traffic
After the system allows it, capture HTTP, HTTPS, and TCP traffic from any app, then send it to a proxy you specify or leave it on local Direct. It works on cellular as well. IPv6 is fully supported.
Request log
Record and inspect HTTP, HTTPS, and DNS requests on the device, so you can see which path a domain actually took instead of only reading Connected. When you debug an API or a page, you do not have to open a capture tool on a computer only.
Usage and latency
Count usage and speed separately for Wi-Fi, cellular, Direct, and proxy. You can measure round-trip time on a node to rule out a completely dead line. Do not treat that number as the only way to pick a node.
Configuration and routing
Subscriptions and manual nodes
Add a subscription from the clipboard, a link, or a QR code, or type servers one by one. After you update a subscription, switch among entries in the list. Nothing depends on a line built into the app.
Split traffic by rules
Supports exact domain match, suffix, keyword, CIDR ranges, and GeoIP. Use rule mode day to day; switch to Global or Direct when you need a comparison. You can also send only some apps through the proxy, or the reverse.
Rule files
Import rules from a URL or iCloud Drive. You can also block by domain or User-Agent, or set local DNS mapping and URL rewrite.
How to set rules and choose among the three modes is in the tutorial Proxy mode and rules.
DNS and advanced options
DNS
Supports DNS over HTTPS, DNS over TLS, DNS over QUIC, and local mapping. If you have no clear need, keep the default or whatever the subscription ships.
Scripts and forwarding
Supports script filters, multi-hop forwarding (proxy chains), and plugins such as kcptun, cloak, gost, and v2ray. These are advanced. If you do not need them, treat them as if they are not there.
HTTPS decryption
The product description includes decrypting HTTPS traffic for debugging. Daily connections do not need it. If you do not understand certificates and the risk, leave it off.
Backup
Configurations, subscriptions, rules, and local edits can be exported, then imported after you switch devices or reinstall. Steps are in Backup, new device, and multiple devices.
Which devices it runs on
The current store page lists this compatibility: iPhone, iPad, and iPod touch need iOS / iPadOS 13 or later; Mac needs macOS 10.15 or later; Apple Vision and Apple TV are also listed. Whether it will install on your device follows what the App Store shows after you sign in.
The same purchase can usually be installed on an iPhone and iPad signed in with the same Apple ID. Menus and system permission locations on Mac differ from the phone. Being able to install does not mean a backup from the phone will import unchanged. Windows PCs and typical Android phones are outside this app’s distribution.
Interface languages include Simplified Chinese, Traditional Chinese, English, Japanese, Korean, Russian, Vietnamese, and others. On the privacy labels, the developer writes: Data Not Collected. The store also states Family Sharing is supported, with up to six people in the same family for this purchase.
Getting the genuine app is in Download. Purchase and account questions are in the FAQ.