Getting started
Install β add a server β connect
Rocket Proxy brings the same RocketCore engine to macOS in a roomy desktop app and a fast menu-bar controller. It requires macOS 13 or later, uses no account, and keeps zero logs.
How to use
- Install Rocket Proxy from the App Store and open it from Applications or Launchpad.
- Open Servers and add a server, enable iCloud Sync, or select the built-in demo server.
- Return to Connect and press the big power button. Approve the macOS network permission the first time.
- Leave the app in the menu bar for everyday control, or keep the full window open while tuning rules.
The desktop window
Connect, Servers, Routing, More
The full Mac app is a resizable desktop window with a sidebar for Connect, Servers, Routing and More. It gives routing rules, diagnostics and inspection tools the space they deserve.
How to use
- Open Rocket Proxy from the menu-bar item or from Applications.
- Use the sidebar to move between Connect, Servers, Routing and More.
- Resize the window when editing long rule lists, reviewing HTTP logs or comparing server details.
- Close the window when finished; Rocket Proxy stays available from the menu bar.


Keyboard shortcuts
macOS menu conventions
Rocket Proxy follows familiar Mac patterns so keyboard-driven users can move quickly. Exact shortcuts may vary by app version, but these are the practical defaults to look for in the menu bar.
How to use
- Use β+, to open Settings / Preferences.
- Use β+N from Servers to add a new server when available.
- Use β+W to close the window. The app stays in the menu bar and the tunnel keeps its current state.
- Open the macOS Rocket Proxy, File and Window menus to see the shortcuts supported by your installed version.
One-tap connect & the live globe
Connect
The Connect screen is home base. A single click opens the tunnel; the interactive globe traces the path from your Mac to your server, and a live panel shows session uptime, upload/download speed, data used and active connections in real time.
How it works
When you connect, RocketCore establishes the tunnel using your selected server's protocol and installs the routing rules for your current mode. macOS routes matching traffic into the tunnel; everything else follows your rules.
How to use
- Open Connect from the sidebar.
- Check the selected server and Routing Mode chips below the button.
- Click the power button to connect; click again to disconnect.
- Watch Uptime, Download/Upload and Connections update live.
Routing modes
Connect β Routing Mode
Routing modes decide what goes through your server. Rocket Proxy gives you four:
The four modes
- Smart β follows your rule set: known ad/tracker and regional domains are handled automatically, the rest goes direct.
- Proxy Everything β every connection is sent through the proxy. Maximum privacy and consistency.
- Direct β nothing is proxied; the tunnel stays up for ad-block and DNS only.
- Local Mode β runs on your Mac with no remote server: network-level ad-blocking and encrypted DNS.
How to use
- On Connect, click the Routing Mode control.
- Pick Smart, Proxy Everything, Direct or Local Mode.
- Switch modes mid-session whenever your work changes.
Smart Route
Connect / More β Smart Connect
Smart Route measures your servers and automatically connects you to the fastest reachable one β then auto-heals by switching away from a server that stops responding.
How it works
Rocket Proxy latency-tests your candidate servers and ranks them. When Smart Route is on, it picks the top performer at connect time and monitors health during the session, failing over if the active server degrades.
How to use
- Add two or more trusted servers in Servers.
- Enable Smart Route from Connect or More β Smart Connect.
- Connect as usual β Rocket Proxy chooses and maintains the best node for you.
Servers & 20+ protocols
Servers
One engine speaks every major protocol: Shadowsocks, ShadowsocksR, VMess, VLESS, Trojan, Hysteria, Hysteria2, TUIC, AnyTLS, WireGuard, SSH, Snell, Brook, Mieru, SOCKS5 and HTTP/HTTPS, plus v2ray-plugin and obfs obfuscation.
How to use
- Open Servers from the sidebar and click + or Add.
- Add manually and pick the protocol from the Type picker, or import from the next section.
- Fill address, port, credentials and any transport/plugin options, then Save.
- Select a server to make it active; use edit, duplicate and delete actions to maintain your list.

Importing servers
Servers β Import
Four ways to add servers fast, so you rarely type anything on your Mac.
How to use
- Paste a link β copy a
ss://,vless://,trojan://or similar URI and choose Paste Server Link. Multiple URIs at once are supported. - Scan or upload a QR code β use the Mac camera when available, or upload a saved QR image.
- Import a config file β choose a subscription or config file from Finder.
- Download from URL β fetch a remote config straight from a provider link.
Demo server & Free Nodes
Servers / More
New to proxies? A built-in free demo server lets you try the app with zero setup. Free Nodes pulls a curated list of public community servers you can experiment with.
How to use
- Select the built-in demo server in Servers, then go to Connect.
- For more public options, open More β Free Nodes and refresh the list.
Network ad-block
More β Ad Blocking
Block ads and trackers for apps on your Mac at the network level β not just in Safari β by filtering requests before they load.
How it works
Rocket Proxy matches outbound connections against maintained block lists and drops known ad/tracker hosts inside the tunnel. Because it works at the connection layer, it covers browsers, Electron apps and in-app web views.
How to use
- Open More β Ad Blocking and turn it on.
- Use it in any mode, including Local Mode with no remote server.
- Refresh lists periodically if you rely on aggressive blocking.
Smart DNS
More β Smart DNS
Resolve names over encrypted DNS so your lookups can't be read or tampered with on the network. Supports plain IP, DoH (https://), DoT (tls://) and DoQ (quic://).
How to use
- Open More β Smart DNS.
- Add a resolver in any supported scheme, such as a DoH
https://URL. - Optionally set a fallback resolver for resilience.
- Connect or use Local Mode to apply DNS handling without a remote proxy.
Routing rules & the Rule Store
Routing β Rules
Rules are the heart of Smart mode: they decide whether each domain or app goes Proxy, Direct or is rejected. The Rule Store ships curated, maintained rule sets so you do not start from scratch.
How it works
Rules are evaluated from top to bottom. The first match wins, so place precise work, test or regional rules above broad defaults.
How to use
- Open Routing β Rules.
- Enable Curated Default Rules, or add your own domain and app rules.
- Browse the Rule Store to add topic sets for streaming, regional access or privacy.
- Reorder rules deliberately β the first match wins.

Regional rules
More β Regional Rules
One switch can auto-route traffic for a region β useful for keeping regional apps, banks, streaming sites and work services behaving as expected while you travel.
How to use
- Open More β Regional Rules.
- Enable the region set you need.
- Update the set periodically to pick up new domains and service changes.
JavaScript rule engine
Routing / Configuration β Scripts
Run JavaScript to intercept, inspect and rewrite requests and responses β MITM-style automation with a desktop-size editor and clearer logs.
How to use
- Open the Script Library from Routing or Configuration Files.
- Add a script by pasting, importing or writing your own.
- Set its trigger pattern so it only runs on matching hosts or paths.
- Enable it and verify behaviour in HTTP Inspector.
HTTPS inspection & rewrites
Routing β HTTPS inspection
Decrypt and inspect your own TLS traffic for debugging, then reshape it with URL Rewrite, Header Rewrite, Body Rewrite and Map Local for local mock responses.
How it works
Rocket Proxy generates a local root certificate. Once you trust it in macOS Keychain Access, the app can decrypt HTTPS for hosts you choose, show contents, and apply rewrites on your Mac.
How to use
- Open Routing β HTTPS inspection.
- Choose the hosts you want to inspect; avoid broad inspection unless you are actively debugging.
- Add URL Rewrite, Header Rewrite, Body Rewrite or Map Local rules.
- Use HTTP Inspector to confirm the rewritten traffic.
HTTPS inspection on Mac β trusting the local CA
Routing β HTTPS inspection β Keychain Access
macOS requires you to explicitly trust Rocket Proxy's local certificate before HTTPS inspection can decrypt traffic. This is a deliberate safety step and you can remove the certificate later.
How to use
- In Routing β HTTPS inspection, choose Export/Install CA Certificate. Rocket Proxy saves
RocketProxyRootCA.certo your Mac. - Double-click the saved
.cerfile to open Keychain Access. Choose the login keychain if macOS asks where to add it. - Find Rocket Proxy Root CA, double-click it, expand Trust, and set When using this certificate to Always Trust.
- Close the certificate window and authenticate with your Mac password or Touch ID to save.
- To remove it later, open Keychain Access, select Rocket Proxy Root CA, and delete it from the login keychain.
Configuration files
Routing β Configuration Files
Import complete configuration profiles β servers, rules and DNS β and switch between them. This is ideal for separating work, home, lab and travel setups.
How to use
- Open Routing β Configuration Files β Add Configuration.
- Import from Finder, a URL, or pasted text.
- Review the profile, then click Use This Config to activate it.
- Return to your previous profile whenever you need a different routing posture.
Smart Connect & on-demand
More β Smart Connect
Auto-connect rules bring the tunnel up automatically on the networks you choose β for example, always connect on public Wi-Fi and stay direct on your trusted home network.
How to use
- Open More β Smart Connect.
- Enable Auto-connect rules / On Demand.
- Choose conditions such as any Wi-Fi, selected networks or untrusted networks.
- Pair with Smart Route so Rocket Proxy chooses the best healthy server when it connects.
Streaming Mode
More β Streaming Mode
Streaming Mode tunes routing for media services so streams resolve to the right region and play smoothly.
How to use
- Open More β Streaming Mode and enable it.
- Pick your target region if prompted.
- Connect, then test your streaming service in Safari or your desktop app.
Data Insights & statistics
More β Data Insights
See where your bandwidth goes with per-service breakdowns, live speeds and overall connection statistics.
How to use
- Open More β Data Insights.
- Review per-app or per-service usage and live throughput.
- Compare usage after switching rules, servers or Streaming Mode.
HTTP Inspector
More β HTTP Inspector
A live log of connections and requests flowing through the tunnel, with system information for debugging. On Mac, the larger window makes it especially useful for developers and support workflows.
How to use
- Open More β HTTP Inspector.
- Connect and watch requests appear in real time.
- Select a request to inspect details, headers and routing outcome.
- Use it alongside HTTPS inspection and rewrite rules when debugging APIs.
Privacy Dashboard
More β Privacy Dashboard
A plain-language view of how Rocket Proxy handles your data, what a proxy can and cannot see, and how many trackers you have blocked.
How to use
- Open More β Privacy Dashboard.
- Read What a proxy can see before choosing public, self-hosted or Premium servers.
- Review blocked-tracker counts and your current privacy posture.
iCloud sync from iPhone
More β iCloud Sync
Your servers, rules and DNS follow you to every device via your private CloudKit store. It is your iCloud β Rocket Proxy cannot read it. This is the easiest way to make your Mac inherit a setup you already built on iPhone or iPad.
How to use
- On iPhone or iPad, open More β iCloud Sync and turn on sync.
- Tap Push Now or leave Automatic Sync enabled.
- On Mac, open More β iCloud Sync and turn it on with the same Apple ID.
- Use Pull Now on Mac to fetch everything immediately, or let Automatic Sync do it for you.
Nearby transfer
Servers β Share / Nearby
Send servers and configs directly to a nearby device, peer-to-peer, without going through the cloud.
How to use
- On the sending device, choose Nearby / Share and select what to send.
- On the Mac, open the Nearby receive screen and accept.
- Or send from the Mac to another device using the same Servers β Share / Nearby action.
Tunnel options
More β Tunnel Options
Advanced tunnel behaviour: IPv6 handling, on-demand, skip-proxy lists, Always Real IP, and test-proxy tools for edge cases.
How to use
- Open More β Tunnel Options.
- Toggle IPv6 if your network or server supports dual-stack traffic.
- Add trusted LAN or corporate hosts to skip-proxy when they must stay local.
- Use Always Real IP for domains that should bypass proxy DNS resolution.
Diagnostics & logs
More β Diagnostics
Run a Connectivity Test, view system information and memory, and export logs when you need to report an issue.
How to use
- Open More β Diagnostics.
- Run Connectivity Test to check DNS, server reachability and routing.
- Use Export Logs when contacting support.
- Attach the exported log file through support only when you are comfortable sharing diagnostic details.
Rocket Proxy