Overview
Getting started
Rocket Proxy is a fast, private proxy & VPN client for iPhone, iPad, Mac and Apple TV. There's no account to create and nothing to sign up for — install it, add a server, and connect.
The app has four tabs along the bottom:
- Connect — the main dashboard: connect/disconnect, live status, speed, active connections and session data.
- Servers — add, edit, test and organise your servers.
- Routing — choose how your traffic is split between the proxy and your direct connection.
- More — Smart Connect, Streaming presets, ad-blocking & rule packs, free community nodes, Smart DNS, your privacy dashboard, iCloud sync, nearby transfer, and app settings.
Add a server
Open the Servers tab, tap +, and paste a link, scan a QR code, or import a config. No server yet? Tap Try Free Demo Server to test instantly.
Choose a routing mode
On the Routing tab pick Smart (Config), Proxy Everything, or Direct. Smart is the recommended default.
Connect
Go to the Connect tab and tap the button. The first time, iOS asks you to allow the VPN configuration — approve it and you're protected.



Servers
Add a server
On the Servers tab tap the + button to open the add menu. You can add servers any of these ways:
- Scan QR Code — scan with the camera or pick a QR image from your photo library.
- Paste Link — paste a proxy share link or a
sub://subscription and Rocket Proxy parses it automatically. - Import from Clipboard — grab a link (or a whole list of links) already on your clipboard.
- Manual Entry — fill in the server fields yourself for full control over transport, TLS, and options.
- Receive from Nearby Device — pull a server wirelessly from another Rocket Proxy device on the same network.
- Import from Cloud — restore servers previously synced to your private iCloud.
- Try Free Demo Server — adds the built-in 🚀 Rocket Proxy Free (Demo) so you can test with zero setup.
Adding a subscription URL (sub://… or a plain https:// subscription endpoint) imports all of its servers at once and can be refreshed later from the More tab.
About the demo server: it's shared and rate-limited for evaluation only. It automatically disconnects after about 5 minutes, with a short (~1 minute) cooldown before you can reconnect. For everyday use, add your own server or subscribe to Premium.
Servers
Manage servers
Everything you need to keep your server list tidy lives on the Servers tab:
- Test All — measures latency to every server at once so you can pick the fastest.
- Re-test one — tap a row's latency badge to re-measure just that server.
- Select / Use This Server — tap a server to make it active; the checkmark shows your current choice.
- Edit — open a server to change its address, transport, TLS, or name.
- Delete — swipe a row to remove it.
- Send to Nearby Device — share a server wirelessly to another Rocket Proxy device.
Swipe actions and context menus (long-press) expose the same actions. On Mac, double-click a server to connect to it directly.
Routing
Connect & routing modes
The Routing tab decides which traffic goes through the proxy and which goes out directly. Choose one of:
- Smart (Config) — recommended. Follows your active config's rules, so domestic and local traffic stays direct while everything else is proxied.
- Proxy Everything — sends all traffic through the selected server. Simple and predictable.
- Direct — nothing is proxied. Useful for pausing the tunnel while keeping DNS and ad-blocking active.
You can also run a Local-Only setup that keeps DNS and ad-blocking on your device without sending traffic to any proxy server — handy for on-device filtering.
When you tap Connect, the dashboard shows live status: current server, upload/download speed, active connection count, session data used, and uptime.
The first connection prompts you to install a VPN configuration (Settings → General → VPN & Device Management). This is standard iOS behaviour for any VPN app — Rocket Proxy keeps no logs and your traffic never leaves your device except through the server you chose.
Automatic
Smart Connect & Streaming
Rocket Proxy can pick and maintain the best server for you, and route streaming services with a single tap.
Smart Connect
- Auto-Select Fastest — when you connect, Rocket Proxy measures your servers and picks the lowest-latency one automatically.
- Auto-Heal Connection — if the active server stops responding, the app fails over to the next-best server on its own, so the tunnel stays up without you noticing.
Turn these on under More ▸ Smart Connect. Great for travel and flaky networks — set it once and forget it.
Streaming Mode
One-tap presets route popular streaming services through your proxy so region-locked catalogues load correctly. Enable More ▸ Streaming Mode, pick a service, and Rocket Proxy adds the right routing rules and suggests a recommended node.
Streaming presets are just routing rules under the hood, so they stack with your existing config — turn a service off any time to route it directly again.
Protocols
Supported links
Rocket Proxy recognises the following share-link schemes. Paste, scan, or import any of them and the app builds the server for you:
Subscriptions are supported too: a sub://<base64> link, a plain https:// subscription endpoint, or a clash://install-config?url=… link all import their servers in bulk.
Automation
Deep-link commands
Rocket Proxy responds to URL commands so you can drive it from Shortcuts, other apps, or a web page. Use the rocketproxy:// scheme (rocket:// and shadowrocket:// also work for compatibility).
| Command | What it does |
|---|---|
rocketproxy://add/{link} | Add a server, sub:// subscription, or https:// subscription URL from the payload. |
rocketproxy://config/add/{url} | Download and install a config from a URL. |
rocketproxy://install?module={url} | Install a module (e.g. an .sgmodule) from a URL. |
rocketproxy://connect | Start the VPN. |
rocketproxy://disconnect | Stop the VPN. |
rocketproxy://toggle | Toggle the connection on/off. |
rocketproxy://connectivity-test | Run a connectivity test. |
rocketproxy://route/proxy | Switch routing to Proxy Everything. |
rocketproxy://route/direct | Switch routing to Direct. |
rocketproxy://route/config | Switch routing to Smart (Config). |
rocketproxy://update-subs | Refresh all subscriptions. |
Combine these in the Shortcuts app to build one-tap automations — for example, connect and switch to Proxy Everything when you join a specific Wi-Fi network.
Configs & rules
Config files & routing rules
Open a config file with Rocket Proxy (from Files, Mail, or “Open in…”) and it's imported automatically. Supported file types:
A file that's simply a list of share links (one per line) is imported as servers; anything with sections or directives is treated as a config, rule list, or module. A .mmdb file installs a GeoIP database (Country or ASN, detected from the filename).
Rule types
Config rules match traffic and send it to a policy. Rocket Proxy supports the standard rule types:
Each rule ends in a policy: proxy, direct, or reject (including the reject variants reject-no-drop, reject-drop, and reject-tinygif for silently dropping ads and trackers).
[Rule] DOMAIN-SUFFIX,ads.example.com,REJECT DOMAIN-KEYWORD,google,PROXY GEOIP,US,PROXY IP-CIDR,192.168.0.0/16,DIRECT FINAL,PROXY
Power tools
Advanced routing & rewrite editors
On the Routing tab, expand Advanced (with a configuration selected) to edit everything in-app — no text editor required. Each editor shows a live count of the entries in your active config.
- Rules — add, reorder and edit routing rules (all the rule types above) and their policies.
- Hosts — pin hostnames to specific IPs, bypassing DNS for those names.
- URL Rewrite — rewrite, redirect (302) or reject requests that match a pattern.
- Header Rewrite — add, remove or replace request/response HTTP headers.
- Body Rewrite — modify response bodies with match/replace rules.
- Map Local — serve a local file or inline text in place of a remote response (handy for testing and blocking).
- Inspect HTTPS Traffic — decrypt selected hostnames using the app's on-device certificate so you can view and rewrite HTTPS. Nothing is decrypted unless you add a hostname, and the key never leaves your device.
- DNS & Network — per-config DNS servers, Skip-Proxy ranges, Always-Real-IP hosts, and IPv6 behaviour.
HTTPS inspection requires trusting Rocket Proxy's locally-generated certificate. Only enable it for hosts you own or are debugging — never for banking or other sensitive apps.
More tab
DNS, blocking & free nodes
Smart DNS
Choose how DNS is resolved: plain UDP, DNS-over-HTTPS (DoH), DNS-over-TLS (DoT), or DNS-over-QUIC (DoQ) — for private, tamper-resistant name resolution.
Ad-blocking & Rule Store
Enable on-device ad and tracker blocking, then browse the built-in Rule Store to add curated one-tap packs — block-lists, unblock/allow-lists and routing packs — each showing how many rules it contains. Regional RULE-SET subscriptions keep your routing current automatically.
Free nodes
Pull servers from curated free community proxy providers. Rocket Proxy fetches the feeds, de-duplicates the results, and adds the working nodes to your list — a quick way to get online when you don't have your own server. (Community-run nodes are best-effort; add your own or subscribe to Premium for reliability.)
GeoIP database
GEOIP rules are powered by a bundled MaxMind GeoLite2 database (Country and ASN). You can update it from a mirror, point it at your own download source, or revert to the bundled copy at any time.
Tunnel options (Advanced)
Fine-tune the tunnel under More ▸ Tunnel Options:
- Allow LAN Access — reach devices on your local network while connected.
- Local Proxy (Proxy Sharing) — expose a local HTTP/SOCKS proxy so other devices can route through this one.
- TCP Fast Open, TLS Fragment and DNS Direct Fallback — connection-level tuning for speed and censorship resistance.
- IPv6 — proxy IPv6 traffic and serve AAAA records.
Auto-connect (On-Demand)
Set On-Demand rules so Rocket Proxy connects automatically — for example, whenever you join an untrusted Wi-Fi network — and stays out of the way on networks you trust.
iCloud sync
Keep your servers and settings in sync across your iPhone, iPad and Mac through your private iCloud — nothing is stored on our servers. You can push, pull, or fully reset your synced library at any time.
Nearby transfer
Send or receive servers directly between nearby Rocket Proxy devices over the local network, no cables or accounts required. You can also export your servers over a local web page (Export via Web) or import over Wi-Fi.
Connectivity test
Run a built-in check to confirm the tunnel is working and your traffic is reaching the internet through the selected server.
Transparency
Privacy dashboard & data insights
Privacy dashboard
The Privacy Dashboard shows, in plain language, what's actually protected: the share of DNS lookups resolved over encrypted transports, how many trackers and ads were blocked, and a reminder that no activity logs ever leave your device. It's a running summary over the last several days that you can reset any time.
Data insights
The Data screens break down your usage: bandwidth over time, a per-service data & speed breakdown, active connections, and a live HTTP inspector for the connections passing through the tunnel — so you can see exactly where your traffic is going.
All of this is computed on-device. Rocket Proxy has no account, no analytics servers, and keeps no logs of the sites you visit.
Migration
Switching from Shadowrocket
Moving over is straightforward — Rocket Proxy understands the same links, config files, and automation you already use:
- Share links & subscriptions — paste your existing
ss://,vmess://,trojan://,sub://and other links directly. - QR codes — scan the same server QR codes you already have.
- Config & module files — import
.confand.sgmodulefiles with the same rule syntax. - Deep links — the
shadowrocket://scheme is supported, so existing shortcuts and links keep working. - Bulk import — paste a whole list of links, or a subscription, to bring everything across at once.
Because the rule types and policies match what you're used to, your routing behaves the same after import — no need to rewrite your config.
FAQ
Common questions
Make sure you allowed the VPN configuration when prompted (Settings → General → VPN & Device Management). Confirm the server details are correct, then try Connect again. If it still fails, email us the server type and any error shown.
The built-in demo server lets you try Rocket Proxy instantly with no setup. It's shared and testing-only, so it auto-disconnects after about 5 minutes and has a short reconnect cooldown. For everyday use, add your own server or subscribe to Premium.
Start with Smart (Config) — it proxies what needs proxying and keeps local traffic direct. Choose Proxy Everything to force all traffic through the server, or Direct to pause proxying while keeping DNS and ad-blocking on.
No. We collect no data and keep no logs. Your traffic stays on your device and only travels through the server you choose. See our Privacy Policy for details.
Share your code from More ▸ Refer & Earn. When a friend redeems it they get 30 days of Premium free, and you get 30 days added to your account too. Invite more friends to keep extending — the screen tracks your redemptions and remaining days. Available on iPhone, iPad and Apple TV.
Turn on the matching preset in More ▸ Streaming Mode and use the recommended node (or any server in the country you want). Streaming Mode adds the routing rules that send that service through your proxy. If a service still blocks, try a different node in the same region.
Free nodes come from public, community-run feeds. They're convenient for casual browsing but are unvetted, can be slow, and may disappear without notice. For anything sensitive or for everyday reliability, add your own server or subscribe to Premium.
Rocket Proxy