How to set up a proxy in Shadowrocket 2026 - iOS proxy guide banner

Shadowrocket is one of the most popular proxy clients on iOS — a rule-based utility that routes your iPhone or iPad traffic through a proxy you provide. The thing many guides skip: Shadowrocket doesn’t give you any IP addresses. It’s the steering wheel, not the engine. To actually route your traffic through a clean residential or mobile IP — for testing, account management, ad verification, or reaching geo-gated content from your phone — you plug a real proxy provider into it. This guide shows how to set up a proxy in Shadowrocket step by step, which proxy type to use, and ranks the best proxies for Shadowrocket in 2026, with DataImpulse at $1/GB as the value pick.

One framing up front: Shadowrocket supports HTTP, HTTPS, and SOCKS5 (plus several encrypted protocols), so almost any proxy works with it technically — but for anything that touches a real account or a defended site, the quality and type of the IP behind it is what decides whether you get through or get blocked.


Key Facts

  • Shadowrocket is a client, not a proxy provider. It’s a paid iOS app that routes traffic through a proxy you supply — it doesn’t include any IPs, so you still need a proxy subscription behind it.
  • It supports HTTP, HTTPS, and SOCKS5 (plus Shadowsocks/VMess/Trojan and other encrypted protocols), so standard residential and mobile proxies plug straight in.
  • iOS only. Shadowrocket runs on iPhone and iPad via a local VPN profile; there’s no official Android build (Android users use Clash or similar).
  • Residential and mobile IPs are what work for account-bound apps and defended sites — datacenter IPs on a phone get flagged fast.
  • Per-app and rule-based routing lets you send only chosen apps or domains through the proxy and the rest direct — useful for testing and account isolation.
  • DataImpulse is the value pick — residential IPs at $1/GB and mobile at $2/GB across 195 countries, HTTP on port 823 and SOCKS5 on port 824, with country/city targeting and sticky sessions — the cost-efficient IP layer to put behind Shadowrocket.

What Shadowrocket Is (and What It Isn’t)

Shadowrocket is a rule-based proxy utility for iOS. It captures your device’s traffic through a local VPN profile and forwards it to whatever proxy server you configure, with rules that decide which apps or domains go through the proxy and which go direct. That rule engine is why people like it: you can route a single app through a residential IP in another country while everything else stays on your normal connection.

What it isn’t is a source of IP addresses. Shadowrocket gives you the routing; it doesn’t give you the exit IP. The exit IP — its type (residential, mobile, datacenter), its country, and how clean it is — comes entirely from the proxy provider you put behind it. So “is Shadowrocket good?” really means “is the proxy I’m running through Shadowrocket good?” Pair it with a free or shady proxy list and you’ll get blocked and leak; pair it with a real residential or mobile provider and it does its job well.


How to Set Up a Proxy in Shadowrocket: Step by Step

The flow below uses DataImpulse credentials as the example; the same steps apply to any HTTP or SOCKS5 proxy.

Step 1 — Get your proxy credentials. Create a DataImpulse account and grab your residential (or mobile) proxy details: host gw.dataimpulse.com, port 823, plus your username and password. To target a country, add it to the username — e.g. YOUR_LOGIN__cr.us for US exit IPs. The $5 / 5GB intro never expires, which is enough to test the setup.

Step 2 — Install Shadowrocket. Download Shadowrocket from the iOS App Store (it’s a paid app) and open it.

Step 3 — Add a new server. On the home screen, tap the + (plus) button in the top-right corner to add a proxy.

Step 4 — Choose the type. At the top, set Type to HTTP (or Socks5 if you prefer SOCKS5 — DataImpulse serves HTTP on port 823 and SOCKS5 on port 824).

Step 5 — Fill in the details. Enter Address gw.dataimpulse.com, Port 823 (use 824 if you chose SOCKS5), then your Username (with the country suffix if you set one) and Password. Give it a recognizable remark/name and tap Save.

Step 6 — Connect. Back on the home screen, tap the new server to select it, set Global Routing to Proxy (or Config if you want rule-based routing), and flip the top toggle from Not Connected to on. The first time, iOS asks to add a VPN configuration — allow it.

Step 7 — Verify the IP. Open a browser and check your visible IP and country (search “what is my IP”). It should show the proxy’s exit IP and country, not your real one. If it still shows your real IP, re-check the type, port, and that Global Routing is set to Proxy.


Which Proxy Type for Shadowrocket?

  • Residential ($1/GB) — the default for almost everything: real consumer IPs that read as ordinary mobile/home users, so account-bound apps and defended sites accept them. Best all-round choice behind Shadowrocket.
  • Mobile ($2/GB) — 4G/5G carrier IPs, the most trusted class for the hardest mobile apps and the most aggressive anti-bot. Use when residential isn’t enough.
  • SOCKS5 vs HTTP — both work in Shadowrocket. SOCKS5 handles any traffic type at a lower level (handy for non-HTTP apps); HTTP is fine for browsing and most apps. DataImpulse offers HTTP on gw.dataimpulse.com:823 and SOCKS5 on :824.
  • Datacenter — only for soft, unprotected endpoints or speed tests; on a phone these IPs get flagged quickly by account-bound services.

Best Proxies for Shadowrocket at a Glance

Provider Best for Shadowrocket Residential price Protocols Notable
DataImpulse Best value, residential + mobile $1/GB PAYG HTTP, SOCKS5 90M+ pool, 195 countries, $2/GB mobile
Bright Data Enterprise scale + coverage ~$4/GB promo; ~$8 standard HTTP, SOCKS5 Largest pool, all IP types
Oxylabs Premium residential + ISP ~$8/GB standard HTTP, SOCKS5 175M+ pool, mobile add-on
IPRoyal Long sticky sessions from ~$7/GB (lower at volume) HTTP, SOCKS5 Sticky up to 7 days, mobile
SOAX Residential + mobile mix $3.60/GB Starter HTTP, SOCKS5 Clean opt-in pool, carrier IPs
Decodo Mid-market all-rounder ~$4/GB PAYG (~$2 volume) HTTP, SOCKS5 115M+ pool, full geo grid
NetNut ISP-residential stability from ~$15/GB (lower at volume) HTTP, SOCKS5 Static consumer-ISP IPs
Webshare Budget / testing ~$3.50/GB (promo ~$1.40) HTTP, SOCKS5 Cheap DC, free tier

The Picks, Briefly

DataImpulse is the value pick to run behind Shadowrocket — residential IPs at $1/GB and mobile at $2/GB across 195 countries, with HTTP (port 823) and SOCKS5 (port 824) on one gateway, country/city targeting, and sticky sessions on a 90M+ pool. For day-to-day Shadowrocket use on iOS — testing, account management, geo checks — paying $1/GB rather than $4–8 keeps it cheap. Bright Data (~$8/GB) and Oxylabs (~$8/GB) are the enterprise pools with the deepest coverage; IPRoyal (from ~$7/GB) has long sticky sessions; SOAX ($3.60/GB) and Decodo (~$4/GB) are solid mid-market options; NetNut brings ISP-static stability; and Webshare is the budget pick for light testing.


Common Shadowrocket Problems (and Fixes)

  • Still shows your real IP. Global Routing isn’t set to Proxy, or the server isn’t selected. Select the server, set routing to Proxy, reconnect, and re-check.
  • Won’t connect / immediate drop. Usually a wrong Type, port, or credentials. Confirm Type (HTTP vs SOCKS5), port 823, and that the username (with any country suffix) and password are exact.
  • Getting blocked or flagged. Almost always the IP, not the app — free or datacenter proxies on a phone get caught. Switch to residential or mobile IPs in the right country.
  • DNS or location leaks. Make sure traffic actually routes through the proxy (rule set or Global Proxy), and test the visible IP and DNS before opening any account-bound app.
  • Session keeps changing IP. Use a sticky session so the IP holds through a task — with DataImpulse, add a session ID to the username; the IP stays for roughly 30 minutes.

Quick Start with DataImpulse

Step 1. Create a DataImpulse account and grab your residential or mobile credentials — host gw.dataimpulse.com, port 823. The $5 / 5GB intro never expires.

Step 2. In Shadowrocket, add a server with Type HTTP or Socks5, the gateway address and port (823 for HTTP, 824 for SOCKS5), and your username/password — adding __cr.us (or another country) to the username to choose the exit country, and ;sessid.xxxx for a sticky session.

Step 3. Set Global Routing to Proxy, connect, verify the exit IP, and use residential for most tasks or mobile for the most defended apps. Full syntax is in the DataImpulse tutorials; see also our best mobile proxies and best SOCKS5 proxies guides.


FAQ

Does Shadowrocket include proxies or VPN servers?

No. Shadowrocket is a client that routes your iOS traffic through a proxy you supply — it doesn’t include any IP addresses. You need a separate proxy provider (residential or mobile) behind it. The exit IP’s type, country, and quality come from that provider, which is what decides whether you get through or get blocked. DataImpulse offers residential at $1/GB and mobile at $2/GB to put behind it.

What proxy type works best in Shadowrocket?

Residential IPs for almost everything — they read as real consumer connections, so account-bound apps and defended sites accept them. Use mobile (4G/5G) IPs for the hardest mobile apps and the most aggressive anti-bot. Datacenter IPs are fine only for soft, unprotected endpoints; on a phone they get flagged quickly. DataImpulse offers residential ($1/GB) and mobile ($2/GB) across 195 countries.

Does Shadowrocket support SOCKS5?

Yes. Shadowrocket supports HTTP, HTTPS, and SOCKS5, plus encrypted protocols like Shadowsocks and VMess. For a standard provider you’ll usually pick HTTP or SOCKS5. DataImpulse supports both: HTTP on gw.dataimpulse.com:823 and SOCKS5 on gw.dataimpulse.com:824, so you choose the matching Type and port when adding the server.

How do I set the proxy country in Shadowrocket?

The country is set in your proxy credentials, not in Shadowrocket itself. With DataImpulse you add the country to the username — for example YOUR_LOGIN__cr.us for US exit IPs or __cr.gb for the UK — and city or ASN targeting is available too. Shadowrocket just forwards traffic to that proxy, so whatever exit country the credentials specify is what you get.

Why am I getting blocked even with Shadowrocket?

The block is almost always about the IP behind Shadowrocket, not the app. Free proxy lists and datacenter IPs on a phone are detected fast and get flagged or banned. Switch to clean residential or mobile IPs in the right country, hold a sticky session through each task, and check for DNS/location leaks. Shadowrocket routes correctly; it’s the proxy quality that gets you through.

Is Shadowrocket available on Android?

No official Android version exists — Shadowrocket is an iOS app for iPhone and iPad. On Android, people use clients like Clash for similar rule-based proxy routing. Either way, the client only does the routing; you still bring your own proxy provider for the exit IPs. DataImpulse works behind both, with HTTP and SOCKS5 endpoints.

Share article: