Shadowrocket proxy setup

Shadowrocket runs as a VPN on iPhone, iPad and Mac and sends the device's traffic to a proxy server you add. Add our gateway as a SOCKS5 server with your login.

Protocols
SOCKS5 and HTTP with a user name and password
UDP
Possible over SOCKS5 (the App Store release notes mention SOCKS5 UDP relay); never over HTTP
Where the setting is
The plus button on the home screen (no official manual, so labels may differ)
Works with
Residential and mobile proxies

Before you start

  • Shadowrocket from the App Store (2.2.92, September 2026, is current). Its developer publishes no help pages, so the steps describe the screens in plain words.
  • Your proxy login and password from the Residential or Mobile page of the dashboard.
  • Traffic on the product you use: a login without traffic is refused.
Connection details
Host
gate.aeonproxy.com
Port (HTTP / HTTPS)
7000
Port (SOCKS5)
7001
Login
your proxy login, with targeting keys if you need them: LOGIN-cc-us-sid-abc123
Password
your proxy password

Copy the login and password from the Residential or Mobile page of the dashboard; the generator there also writes ready lines. Key syntax: targeting and sessions.

Add the proxy

  1. On the home screen, tap the plus button to add a server.
  2. Set the type to SOCKS5. For port 7000 choose HTTP, not HTTPS. In proxy apps HTTPS usually means TLS to the proxy itself, which port 7000 does not speak, so the connection hangs.
  3. Address gate.aeonproxy.com, port 7001 for SOCKS5 or 7000 for HTTP.
  4. User and password: your login with keys, for example LOGIN-cc-us-sid-ios01-ttl-30, and your password. A remark (US sticky, say) helps once you have several servers.
  5. Save, select the server in the list and turn on the main switch. The first time, iOS asks you to allow adding a VPN configuration.
  6. Set the app's global routing to Proxy to send everything through the server. Otherwise the rules of the active config decide, and they can send some sites direct.

Check the proxy

With the switch on, open /ip-checker in Safari. The IP and country should be the exit's. Then look at the WebRTC test, which runs over UDP. If it shows your own address, UDP is not using the proxy: check that the server is SOCKS5 and that global routing is set to Proxy.

Rotating or sticky

Phone apps open new connections all the time, and with a rotating login each of them gets a new IP. Apps that keep you signed in can treat that as a new device. Use a sticky login:

LOGIN-cc-us-sid-ios01-ttl-30

The exit stays for 30 minutes (60 at most) and then changes to a new IP in the same country. Add two or three servers with different keys or countries and tap the one you want; changing the key (ios02) gives a new IP at once.

UDP and calls

The App Store description says Shadowrocket captures HTTP, HTTPS and TCP traffic. Its release notes also list UDP fixes, including one for SOCKS5 UDP relay, and our port 7001 relays UDP (UDP ASSOCIATE). The developer documents nothing more, so test before you count on calls or games using the exit: the WebRTC test on /ip-checker shows which IP UDP leaves from. An HTTP server never carries UDP.

If it does not work

What you seeWhat to check
The switch turns on, but nothing loadsThe type and port pair: SOCKS5 with 7001, HTTP with 7000. HTTPS chosen by mistake hangs.
It fails right after connectingThe login, the password, a key that is not in the lists, or no traffic left on the product.
/ip-checker shows your own IPGlobal routing is not set to Proxy and a rule sends the site direct, or another VPN profile is active.
The IP changes inside one app sessionA rotating login, or a sticky key whose time ran out. Use -sid-…-ttl-60 for long sessions.
One site never opens, the rest workSome targets are blocked by default for every account: mail ports 25, 465, 587 and 2525, .gov / .mil sites and some banking and ticketing sites (limits, Acceptable Use Policy).

Questions

SOCKS5. Web pages work over both, but only SOCKS5 can carry UDP (QUIC, calls, WebRTC). HTTP carries TCP only.

The App Store lists Shadowrocket for Mac (macOS 10.15 or later). Enter the same server details there and check with /ip-checker in the Mac's browser.

With a rotating login every new connection takes a new IP. With a sticky key the IP stays until its time runs out, even across a reconnect.

Proxy questions? Ask support in the live chat.