Shadowrocket proxy setup
Shadowrocket runs as a VPN on iPhone, iPad and Mac and sends the device's traffic to a proxy server you add. Add our gateway as a SOCKS5 server with your login.
- Protocols
- SOCKS5 and HTTP with a user name and password
- UDP
- Possible over SOCKS5 (the App Store release notes mention SOCKS5 UDP relay); never over HTTP
- Where the setting is
- The plus button on the home screen (no official manual, so labels may differ)
- Works with
- Residential and mobile proxies
Before you start
- Shadowrocket from the App Store (2.2.92, September 2026, is current). Its developer publishes no help pages, so the steps describe the screens in plain words.
- Your proxy login and password from the Residential or Mobile page of the dashboard.
- Traffic on the product you use: a login without traffic is refused.
- Host
gate.aeonproxy.com- Port (HTTP / HTTPS)
7000- Port (SOCKS5)
7001- Login
- your proxy login, with targeting keys if you need them:
LOGIN-cc-us-sid-abc123 - Password
- your proxy password
Copy the login and password from the Residential or Mobile page of the dashboard; the generator there also writes ready lines. Key syntax: targeting and sessions.
Add the proxy
- On the home screen, tap the plus button to add a server.
- Set the type to SOCKS5. For port 7000 choose HTTP, not HTTPS. In proxy apps HTTPS usually means TLS to the proxy itself, which port 7000 does not speak, so the connection hangs.
- Address
gate.aeonproxy.com, port7001for SOCKS5 or7000for HTTP. - User and password: your login with keys, for example
LOGIN-cc-us-sid-ios01-ttl-30, and your password. A remark (US sticky, say) helps once you have several servers. - Save, select the server in the list and turn on the main switch. The first time, iOS asks you to allow adding a VPN configuration.
- Set the app's global routing to Proxy to send everything through the server. Otherwise the rules of the active config decide, and they can send some sites direct.
Check the proxy
With the switch on, open /ip-checker in Safari. The IP and country should be the exit's. Then look at the WebRTC test, which runs over UDP. If it shows your own address, UDP is not using the proxy: check that the server is SOCKS5 and that global routing is set to Proxy.
Rotating or sticky
Phone apps open new connections all the time, and with a rotating login each of them gets a new IP. Apps that keep you signed in can treat that as a new device. Use a sticky login:
LOGIN-cc-us-sid-ios01-ttl-30The exit stays for 30 minutes (60 at most) and then changes to a new IP in the same country. Add two or three servers with different keys or countries and tap the one you want; changing the key (ios02) gives a new IP at once.
UDP and calls
The App Store description says Shadowrocket captures HTTP, HTTPS and TCP traffic. Its release notes also list UDP fixes, including one for SOCKS5 UDP relay, and our port 7001 relays UDP (UDP ASSOCIATE). The developer documents nothing more, so test before you count on calls or games using the exit: the WebRTC test on /ip-checker shows which IP UDP leaves from. An HTTP server never carries UDP.
If it does not work
| What you see | What to check |
|---|---|
| The switch turns on, but nothing loads | The type and port pair: SOCKS5 with 7001, HTTP with 7000. HTTPS chosen by mistake hangs. |
| It fails right after connecting | The login, the password, a key that is not in the lists, or no traffic left on the product. |
| /ip-checker shows your own IP | Global routing is not set to Proxy and a rule sends the site direct, or another VPN profile is active. |
| The IP changes inside one app session | A rotating login, or a sticky key whose time ran out. Use -sid-…-ttl-60 for long sessions. |
| One site never opens, the rest work | Some targets are blocked by default for every account: mail ports 25, 465, 587 and 2525, .gov / .mil sites and some banking and ticketing sites (limits, Acceptable Use Policy). |
Questions
SOCKS5. Web pages work over both, but only SOCKS5 can carry UDP (QUIC, calls, WebRTC). HTTP carries TCP only.
The App Store lists Shadowrocket for Mac (macOS 10.15 or later). Enter the same server details there and check with /ip-checker in the Mac's browser.
With a rotating login every new connection takes a new IP. With a sticky key the IP stays until its time runs out, even across a reconnect.