Official Manual / Glossary

Shadowrocket Glossary

Keep the original English terms and interpret them in context. First distinguish interface modes, protocols, and rule actions, then check parameters in your existing subscription or server details.

30 glossary entries Interface terms and rule keywords Browse by category

Shadowrocket is a paid, closed-source app for Apple platforms, primarily used on iPhone and iPad. The App Store is the only place to get it. Before purchasing, check the how to verify the genuine app guide for the developer, Shadow Launch Technology Limited, the official icon, and app ID 932747118. Check the App Store listing for system requirements and device compatibility.

This glossary explains concepts; it is not a step-by-step guide. For your first import, follow the getting started guide. For option details and troubleshooting steps, see the settings manual. The sections below assume you already have your own subscription or server details.

01 / Interface & Toggles

Modes and Key Actions

Global Routing offers three modes: Config, Proxy, and Direct. The selected mode determines how connections are handled; it does not indicate whether a server is available.

Interface & TogglesHome: The main place to view server entries and subscription groups and choose a connection. An entry in the list means only that its connection details have been saved; it does not confirm successful authentication or an established connection. When troubleshooting, first check the selected entry, then the connection toggle and the actual result.

Interface & TogglesGlobal Routing: Selects how connections are handled: Config, Proxy, or Direct. Config routes traffic according to the active configuration's rules; Proxy uses the proxy path; Direct uses a direct path. Changing the mode and changing the server are separate actions. Note the current state of both before testing.

Interface & TogglesConfig: This term can refer to the configuration management screen or the Config mode in Global Routing; its meaning depends on context. In Config mode, the active rules determine where connections go. Importing a server subscription alone does not select a configuration or mean that all traffic will use a proxy.

Interface & TogglesProxy: As a Global Routing option, Proxy routes connections through a proxy. It can be useful for a controlled comparison with Config mode when troubleshooting. It will not fix an incorrect password, an unavailable address, or mismatched protocol parameters. Note that the interface option Proxy differs in capitalization and scope from the PROXY rule action.

Interface & TogglesDirect: As a Global Routing option, Direct sends connections without forwarding them through the selected proxy server. Direct connections still depend on the current network, DNS resolution, and the destination service. It does not turn off the device's network. If access works after switching to Direct, that confirms only that the direct path works—not that the proxy parameters are correct.

Interface & TogglesAdd Server: The entry point for manually entering existing server details. The fields vary by protocol. Select the correct protocol first, then check the address, port, authentication, and transport parameters one by one. Do not fill in unknown fields just to complete the form, or enter a subscription URL as a server hostname.

02 / Settings

DNS, On-Demand Connections, and Diagnostics

Settings adjust connection behavior or show status. When troubleshooting, change one option at a time and note its original value. Changing several conditions at once makes it harder to identify the cause.

SettingsDNS: DNS resolves domain names to IP addresses that can be used for connections. The results may also be used for address-based rule matching. DNS resolution and the connection path are not necessarily the same thing. If results do not change immediately after adjusting DNS, consider caching, the active configuration, and system network status rather than repeatedly adding settings.

SettingsOn Demand: Triggers system connection behavior when configured conditions are met, reducing the need for repeated manual actions. It determines when to attempt a connection; it does not replace server selection, protocol parameters, or routing rules. When testing a manual disconnect, check the On Demand conditions too, so an automatic reconnection is not mistaken for an ineffective toggle.

SettingsPing: A setting or test related to response-time measurements. Results depend on the test method, target, and network conditions at the time. A shorter response time does not mean a faster download, and a single timeout does not prove that all connections will fail. For a fair comparison, use the same method and consider actual access results and logs.

SettingsLog: Use logs to inspect the connection process and distinguish issues with DNS resolution, server connections, authentication, and rule matching. Locate entries associated with a specific test instead of inferring the cause from the last line alone. Logs may contain destination or server details; remove sensitive information before sharing them.

SettingsiCloud Sync: Uses iCloud to sync app-supported data across eligible devices. Check the in-app information for the exact scope of syncing. This is not a full device backup or a way to restore App Store purchases. Before changing devices, confirm that syncing is complete and separately keep any subscription or server details you still need.

03 / Protocols

Protocol Names and Parameter Requirements

A protocol defines how a client and server communicate. Protocol names are not a performance ranking. Use the protocol supported by your existing server, and make sure the transport method and security parameters match.

ProtocolsShadowsocks: A proxy protocol that requires matching server address, port, encryption method, password, and other details. The encryption method is a protocol parameter and cannot be substituted just because another method has a similar name. If an existing entry includes additional parameters, check them against the original server instructions instead of copying only the address and port.

ProtocolsVMess: A proxy protocol with authentication and encryption, usually used with specific transport settings. The identity, transport type, and related fields must match the server; a correct address alone is not enough to connect. When troubleshooting, check protocol authentication separately from the transport layer, and make sure the device's time is correct.

ProtocolsVLESS: A lightweight proxy protocol. Its protocol-level authentication and the transport security settings for the connection should be considered separately. After importing an entry, check the identity and the transport and security options required by the server. Do not assume VMess and VLESS are interchangeable just because their identifiers look similar.

ProtocolsTrojan: A proxy protocol that typically uses TLS for transport and password authentication. In addition to the address, port, and password, check the server name and certificate verification requirements. If you encounter a certificate error, first check the name, device time, and server configuration; disabling verification is not a routine fix.

ProtocolsHysteria2: A QUIC-based proxy protocol that relies on an appropriate UDP path. Even with correct server authentication parameters, the connection may fail if the current network restricts UDP traffic. The protocol name does not guarantee speed. Enter any bandwidth-related fields according to the actual server instructions.

ProtocolsWireGuard: A tunneling protocol that uses public and private keys for authentication. Configure the endpoint, keys, addresses, and routing parameters correctly. Public and private keys have different purposes and are not interchangeable; protect the private key as a sensitive credential. Importing an entry does not guarantee that its addresses and routes suit your environment, so verify the connection.

ProtocolsHTTP / SOCKS5: These are two distinct proxy protocols, not different names for the same type. Authentication and transport capabilities depend on the server's actual settings. The port number alone is not a reliable way to choose a protocol. A standard HTTP proxy and SOCKS5 are not encrypted tunnels; check the security of the connection separately.

04 / Rule Keywords

Match Conditions and Actions

A rule usually consists of a match type, a match value, and an action. First check whether the condition matches, then check where the action sends the connection. Rule order can also affect the outcome.

Rule KeywordsDOMAIN / DOMAIN-SUFFIX: DOMAIN matches a specific full domain; DOMAIN-SUFFIX matches a domain suffix and its subdomains. For example, DOMAIN-SUFFIX,example.com,PROXY can cover the domain and its subdomains. Enter a domain, not a full URL with a path. The two rule types also cover different ranges.

Rule KeywordsDOMAIN-KEYWORD: Matches a domain if it contains the specified keyword, usually covering more than a full-domain or domain-suffix match. Short or common strings may match domains you did not intend to include. To target only specific domains, consider whether DOMAIN or DOMAIN-SUFFIX can define a clearer boundary.

Rule KeywordsGEOIP: Matches an address using an IP geolocation database, for example, GEOIP,CN,DIRECT. It checks the address's location in the database, not the webpage's language, content origin, or the website operator's location. Database updates, DNS results, and caching can all affect which rules match.

Rule KeywordsIP-CIDR / IP-CIDR6: These match IPv4 and IPv6 address ranges, respectively. The prefix length after the slash determines the range. An incorrect prefix length can broaden the match and send unrelated connections to the same policy. IPv4-only rules do not automatically cover IPv6; check which address family the destination uses.

Rule KeywordsFINAL: Matches connections not covered by earlier rules and is usually placed at the end of the rule list as a fallback. FINAL,PROXY sends the remaining connections to the policy specified by PROXY. It does not test whether a server is available; connections already matched by earlier rules are not re-evaluated by the fallback.

Rule KeywordsPROXY / DIRECT / REJECT: These uppercase keywords are rule actions, not domains or protocols: PROXY sends traffic to a proxy policy, DIRECT connects directly, and REJECT blocks the connection. Check the active configuration and selection to see which proxy PROXY uses. These actions are not the same as the Proxy and Direct toggles in Global Routing.

05 / Subscriptions & Configurations

Data Sources, Imports, and Purchase History

Server subscriptions update connection entries, configuration files organize traffic handling, and the App Store records app purchases. These are separate items and must be restored separately; restoring the app does not necessarily restore connection details.

Subscriptions & ConfigurationsServer: A connection entry that stores the protocol, host address, port, authentication, and other details. Its display name is mainly for identification. Two entries with the same name may have different parameters, while differently named entries may point to the same server. When troubleshooting or removing duplicates, compare the actual fields rather than relying on display names or group names.

Subscriptions & ConfigurationsConfiguration File: Organizes rules, DNS, and other handling options to determine how connections are routed in Config mode. Server subscriptions mainly update connection endpoints; configuration files mainly define handling logic. They are not interchangeable. Before enabling a new configuration, keep a copy you can revert to and confirm that its referenced policies correspond to actual connection entries.

Subscriptions & ConfigurationsScan QR Code: An import option for reading connection details from a QR code. A QR code is a data carrier, not a protocol. Scan only codes from known sources for services you already use, then check the recognized protocol and required fields before saving. QR codes may also contain sensitive authentication details, so do not share them as ordinary images.

Subscriptions & ConfigurationsPurchased Items: App Store purchase history associated with your Apple Account, which may allow you to redownload the app when eligible. Restoring a purchase does not necessarily restore subscriptions, server entries, or local configurations; check these separately. Check the App Store listing for purchase availability on iPhone and iPad and compatibility with other devices.

For the steps to import your details and make your first connection, continue to the getting started guide. For App Store purchase or connection prompts, see the FAQ. These definitions help identify terms; check the in-app interface for actual fields, available options, and setting locations.

Back to the top of the glossary ↑