User Guide

Everything you need to run Rocket Proxy.

Add a server, pick how your traffic is routed, and connect. This guide covers every screen — supported protocols, Smart Connect & Streaming presets, the advanced rule & rewrite editors, your privacy dashboard, refer-a-friend rewards, deep-link automation, and moving over from Shadowrocket.

Overview

Getting started

Rocket Proxy is a fast, private proxy & VPN client for iPhone, iPad, Mac and Apple TV. There's no account to create and nothing to sign up for — install it, add a server, and connect.

The app has four tabs along the bottom:

  • Connect — the main dashboard: connect/disconnect, live status, speed, active connections and session data.
  • Servers — add, edit, test and organise your servers.
  • Routing — choose how your traffic is split between the proxy and your direct connection.
  • More — Smart Connect, Streaming presets, ad-blocking & rule packs, free community nodes, Smart DNS, your privacy dashboard, iCloud sync, nearby transfer, and app settings.
  1. Add a server

    Open the Servers tab, tap +, and paste a link, scan a QR code, or import a config. No server yet? Tap Try Free Demo Server to test instantly.

  2. Choose a routing mode

    On the Routing tab pick Smart (Config), Proxy Everything, or Direct. Smart is the recommended default.

  3. Connect

    Go to the Connect tab and tap the button. The first time, iOS asks you to allow the VPN configuration — approve it and you're protected.

Connect screen
Connect
Servers screen
Servers
Routing screen
Routing

Servers

Add a server

On the Servers tab tap the + button to open the add menu. You can add servers any of these ways:

  • Scan QR Code — scan with the camera or pick a QR image from your photo library.
  • Paste Link — paste a proxy share link or a sub:// subscription and Rocket Proxy parses it automatically.
  • Import from Clipboard — grab a link (or a whole list of links) already on your clipboard.
  • Manual Entry — fill in the server fields yourself for full control over transport, TLS, and options.
  • Receive from Nearby Device — pull a server wirelessly from another Rocket Proxy device on the same network.
  • Import from Cloud — restore servers previously synced to your private iCloud.
  • Try Free Demo Server — adds the built-in 🚀 Rocket Proxy Free (Demo) so you can test with zero setup.
💡

Adding a subscription URL (sub://… or a plain https:// subscription endpoint) imports all of its servers at once and can be refreshed later from the More tab.

⏱️

About the demo server: it's shared and rate-limited for evaluation only. It automatically disconnects after about 5 minutes, with a short (~1 minute) cooldown before you can reconnect. For everyday use, add your own server or subscribe to Premium.

Servers

Manage servers

Everything you need to keep your server list tidy lives on the Servers tab:

  • Test All — measures latency to every server at once so you can pick the fastest.
  • Re-test one — tap a row's latency badge to re-measure just that server.
  • Select / Use This Server — tap a server to make it active; the checkmark shows your current choice.
  • Edit — open a server to change its address, transport, TLS, or name.
  • Delete — swipe a row to remove it.
  • Send to Nearby Device — share a server wirelessly to another Rocket Proxy device.

Swipe actions and context menus (long-press) expose the same actions. On Mac, double-click a server to connect to it directly.

Routing

Connect & routing modes

The Routing tab decides which traffic goes through the proxy and which goes out directly. Choose one of:

  • Smart (Config)recommended. Follows your active config's rules, so domestic and local traffic stays direct while everything else is proxied.
  • Proxy Everything — sends all traffic through the selected server. Simple and predictable.
  • Direct — nothing is proxied. Useful for pausing the tunnel while keeping DNS and ad-blocking active.

You can also run a Local-Only setup that keeps DNS and ad-blocking on your device without sending traffic to any proxy server — handy for on-device filtering.

When you tap Connect, the dashboard shows live status: current server, upload/download speed, active connection count, session data used, and uptime.

🔐

The first connection prompts you to install a VPN configuration (Settings → General → VPN & Device Management). This is standard iOS behaviour for any VPN app — Rocket Proxy keeps no logs and your traffic never leaves your device except through the server you chose.

Automatic

Smart Connect & Streaming

Rocket Proxy can pick and maintain the best server for you, and route streaming services with a single tap.

Smart Connect

  • Auto-Select Fastest — when you connect, Rocket Proxy measures your servers and picks the lowest-latency one automatically.
  • Auto-Heal Connection — if the active server stops responding, the app fails over to the next-best server on its own, so the tunnel stays up without you noticing.

Turn these on under More ▸ Smart Connect. Great for travel and flaky networks — set it once and forget it.

Streaming Mode

One-tap presets route popular streaming services through your proxy so region-locked catalogues load correctly. Enable More ▸ Streaming Mode, pick a service, and Rocket Proxy adds the right routing rules and suggests a recommended node.

NetflixDisney+BBC iPlayer HuluYouTubePrime Video
💡

Streaming presets are just routing rules under the hood, so they stack with your existing config — turn a service off any time to route it directly again.

Protocols

Supported links

Rocket Proxy recognises the following share-link schemes. Paste, scan, or import any of them and the app builds the server for you:

ss://shadowsocks://ssr://sr:// vmess://vless://trojan://trojan-go:// hysteria2://hy2://hysteria://hy:// tuic://anytls://snell://juicity:// wireguard://wg://ssh:// socks://socks5://http://https:// mieru://mierus://brook:// openconnect://anyconnect://

Subscriptions are supported too: a sub://<base64> link, a plain https:// subscription endpoint, or a clash://install-config?url=… link all import their servers in bulk.

Automation

Deep-link commands

Rocket Proxy responds to URL commands so you can drive it from Shortcuts, other apps, or a web page. Use the rocketproxy:// scheme (rocket:// and shadowrocket:// also work for compatibility).

CommandWhat it does
rocketproxy://add/{link}Add a server, sub:// subscription, or https:// subscription URL from the payload.
rocketproxy://config/add/{url}Download and install a config from a URL.
rocketproxy://install?module={url}Install a module (e.g. an .sgmodule) from a URL.
rocketproxy://connectStart the VPN.
rocketproxy://disconnectStop the VPN.
rocketproxy://toggleToggle the connection on/off.
rocketproxy://connectivity-testRun a connectivity test.
rocketproxy://route/proxySwitch routing to Proxy Everything.
rocketproxy://route/directSwitch routing to Direct.
rocketproxy://route/configSwitch routing to Smart (Config).
rocketproxy://update-subsRefresh all subscriptions.
⚡️

Combine these in the Shortcuts app to build one-tap automations — for example, connect and switch to Proxy Everything when you join a specific Wi-Fi network.

Configs & rules

Config files & routing rules

Open a config file with Rocket Proxy (from Files, Mail, or “Open in…”) and it's imported automatically. Supported file types:

.conf.sgmodule.module .yaml.yml.list .txt.mmdb

A file that's simply a list of share links (one per line) is imported as servers; anything with sections or directives is treated as a config, rule list, or module. A .mmdb file installs a GeoIP database (Country or ASN, detected from the filename).

Rule types

Config rules match traffic and send it to a policy. Rocket Proxy supports the standard rule types:

DOMAINDOMAIN-SUFFIXDOMAIN-KEYWORD DOMAIN-WILDCARDDOMAIN-SETIP-CIDR IP-CIDR6IP-ASNGEOIP USER-AGENTURL-REGEXDEST-PORT SRC-PORTSRC-IPPROTOCOL PROCESS-NAMERULE-SETAND ORNOTFINAL

Each rule ends in a policy: proxy, direct, or reject (including the reject variants reject-no-drop, reject-drop, and reject-tinygif for silently dropping ads and trackers).

[Rule]
DOMAIN-SUFFIX,ads.example.com,REJECT
DOMAIN-KEYWORD,google,PROXY
GEOIP,US,PROXY
IP-CIDR,192.168.0.0/16,DIRECT
FINAL,PROXY

Power tools

Advanced routing & rewrite editors

On the Routing tab, expand Advanced (with a configuration selected) to edit everything in-app — no text editor required. Each editor shows a live count of the entries in your active config.

  • Rules — add, reorder and edit routing rules (all the rule types above) and their policies.
  • Hosts — pin hostnames to specific IPs, bypassing DNS for those names.
  • URL Rewrite — rewrite, redirect (302) or reject requests that match a pattern.
  • Header Rewrite — add, remove or replace request/response HTTP headers.
  • Body Rewrite — modify response bodies with match/replace rules.
  • Map Local — serve a local file or inline text in place of a remote response (handy for testing and blocking).
  • Inspect HTTPS Traffic — decrypt selected hostnames using the app's on-device certificate so you can view and rewrite HTTPS. Nothing is decrypted unless you add a hostname, and the key never leaves your device.
  • DNS & Network — per-config DNS servers, Skip-Proxy ranges, Always-Real-IP hosts, and IPv6 behaviour.
🔒

HTTPS inspection requires trusting Rocket Proxy's locally-generated certificate. Only enable it for hosts you own or are debugging — never for banking or other sensitive apps.

More tab

DNS, blocking & free nodes

Smart DNS

Choose how DNS is resolved: plain UDP, DNS-over-HTTPS (DoH), DNS-over-TLS (DoT), or DNS-over-QUIC (DoQ) — for private, tamper-resistant name resolution.

Ad-blocking & Rule Store

Enable on-device ad and tracker blocking, then browse the built-in Rule Store to add curated one-tap packs — block-lists, unblock/allow-lists and routing packs — each showing how many rules it contains. Regional RULE-SET subscriptions keep your routing current automatically.

Free nodes

Pull servers from curated free community proxy providers. Rocket Proxy fetches the feeds, de-duplicates the results, and adds the working nodes to your list — a quick way to get online when you don't have your own server. (Community-run nodes are best-effort; add your own or subscribe to Premium for reliability.)

GeoIP database

GEOIP rules are powered by a bundled MaxMind GeoLite2 database (Country and ASN). You can update it from a mirror, point it at your own download source, or revert to the bundled copy at any time.

Tunnel options (Advanced)

Fine-tune the tunnel under More ▸ Tunnel Options:

  • Allow LAN Access — reach devices on your local network while connected.
  • Local Proxy (Proxy Sharing) — expose a local HTTP/SOCKS proxy so other devices can route through this one.
  • TCP Fast Open, TLS Fragment and DNS Direct Fallback — connection-level tuning for speed and censorship resistance.
  • IPv6 — proxy IPv6 traffic and serve AAAA records.

Auto-connect (On-Demand)

Set On-Demand rules so Rocket Proxy connects automatically — for example, whenever you join an untrusted Wi-Fi network — and stays out of the way on networks you trust.

iCloud sync

Keep your servers and settings in sync across your iPhone, iPad and Mac through your private iCloud — nothing is stored on our servers. You can push, pull, or fully reset your synced library at any time.

Nearby transfer

Send or receive servers directly between nearby Rocket Proxy devices over the local network, no cables or accounts required. You can also export your servers over a local web page (Export via Web) or import over Wi-Fi.

Connectivity test

Run a built-in check to confirm the tunnel is working and your traffic is reaching the internet through the selected server.

Transparency

Privacy dashboard & data insights

Privacy dashboard

The Privacy Dashboard shows, in plain language, what's actually protected: the share of DNS lookups resolved over encrypted transports, how many trackers and ads were blocked, and a reminder that no activity logs ever leave your device. It's a running summary over the last several days that you can reset any time.

Data insights

The Data screens break down your usage: bandwidth over time, a per-service data & speed breakdown, active connections, and a live HTTP inspector for the connections passing through the tunnel — so you can see exactly where your traffic is going.

🔏

All of this is computed on-device. Rocket Proxy has no account, no analytics servers, and keeps no logs of the sites you visit.

Premium

Rocket Proxy Premium & referrals

Premium is an optional monthly subscription that unlocks Rocket Proxy's managed, high-throughput servers with 200 GB of data every month — no third-party server setup required.

  • Dedicated premium servers tuned for speed and reliability.
  • 200 GB monthly data allowance.
  • Everything in the free app stays free — bring your own servers any time.

Manage or cancel anytime in your Apple Account subscription settings. Cancelling keeps access until the end of the current billing period.

Refer a friend — give 30 days, get 30 days

Open More ▸ Refer & Earn to get your personal code. Share it with a friend: when they redeem it, they get 30 days of Premium free — and so do you. Redemptions stack, so you can extend your Premium simply by inviting more people.

  1. Share your code

    Copy your code from the Refer & Earn screen and send it however you like.

  2. Your friend redeems it

    They tap Redeem a Code, enter your code, and instantly get 30 days of Premium.

  3. You both benefit

    Your account is credited 30 days too — the screen shows how many friends have joined and how many days you have left.

🎁

Referrals are verified on-device with Apple's App Attest, so the feature is available on iPhone, iPad and Apple TV. (Mac support arrives with a future macOS release.)

Migration

Switching from Shadowrocket

Moving over is straightforward — Rocket Proxy understands the same links, config files, and automation you already use:

  • Share links & subscriptions — paste your existing ss://, vmess://, trojan://, sub:// and other links directly.
  • QR codes — scan the same server QR codes you already have.
  • Config & module files — import .conf and .sgmodule files with the same rule syntax.
  • Deep links — the shadowrocket:// scheme is supported, so existing shortcuts and links keep working.
  • Bulk import — paste a whole list of links, or a subscription, to bring everything across at once.

Because the rule types and policies match what you're used to, your routing behaves the same after import — no need to rewrite your config.

FAQ

Common questions

Make sure you allowed the VPN configuration when prompted (Settings → General → VPN & Device Management). Confirm the server details are correct, then try Connect again. If it still fails, email us the server type and any error shown.

The built-in demo server lets you try Rocket Proxy instantly with no setup. It's shared and testing-only, so it auto-disconnects after about 5 minutes and has a short reconnect cooldown. For everyday use, add your own server or subscribe to Premium.

Start with Smart (Config) — it proxies what needs proxying and keeps local traffic direct. Choose Proxy Everything to force all traffic through the server, or Direct to pause proxying while keeping DNS and ad-blocking on.

No. We collect no data and keep no logs. Your traffic stays on your device and only travels through the server you choose. See our Privacy Policy for details.

Share your code from More ▸ Refer & Earn. When a friend redeems it they get 30 days of Premium free, and you get 30 days added to your account too. Invite more friends to keep extending — the screen tracks your redemptions and remaining days. Available on iPhone, iPad and Apple TV.

Turn on the matching preset in More ▸ Streaming Mode and use the recommended node (or any server in the country you want). Streaming Mode adds the routing rules that send that service through your proxy. If a service still blocks, try a different node in the same region.

Free nodes come from public, community-run feeds. They're convenient for casual browsing but are unvetted, can be slow, and may disappear without notice. For anything sensitive or for everyday reliability, add your own server or subscribe to Premium.

App Store Get the app