Shadowrocket’s interface terms fall into two groups: Home, Config, Data, and Settings are tabs; Config, Proxy, Direct, and Scene under Global Routing are routing options. When setting up, check your existing servers on Home, then confirm the routing mode and connection status. Use Config to review rules, Data to investigate requests, and Settings to adjust automatic connection behavior. This guide assumes you already have your own service provider and subscription, and explains what each term does and where its scope ends.
1. Tabs and Global Routing: Know the Difference
The same English term can mean different things depending on where it appears. Config is the easiest to mix up: the Config tab is where you manage configuration files, while Home → Global Routing → Config means traffic is handled according to the active configuration file. Opening the Config tab does not enable rule-based routing; check Global Routing on Home as well.
Another common misconception is that Proxy refers to a specific protocol. Under Global Routing, Proxy describes a routing mode; it is not another name for Shadowsocks, VMess, VLESS, Trojan, Hysteria2, or WireGuard. The Type and settings of each server entry determine its protocol. The routing mode and configuration determine whether traffic is handled by a proxy.
| Interface term and location | What it does | When to check it |
|---|---|---|
| Home | View servers, the connection control, and Global Routing. | Select a server, check it before connecting, and run tests. |
| Config tab | Manage and select configuration files. | Review rules, DNS, and other configuration settings. |
| Data | View request and traffic information recorded by the app. | Investigate how a particular request was handled. |
| Settings | Adjust app settings. | Review settings such as On Demand and Subscribe. |
| Global Routing | Choose how traffic is handled. | Find out why traffic used a proxy, went direct, or followed configuration rules. |
2. Home: Select a Server and Check the Connection
Home is the main place to start when connecting. Server entries can be added manually or come from a Subscribe you already have. Seeing a server in the list only means its entry is saved; it does not confirm that the address is reachable, authentication is valid, or the destination website can be accessed. First check the selected server, then turn on the connection, and finally verify it with a test and an actual request.
Connectivity Test can help you assess connectivity. Interpret the result alongside your current network, selected server, and real-world access: a latency reading does not mean every website will load, and a timeout alone does not prove the password is wrong. Check separately for network reachability, an unresponsive server, or an unreachable test target.
-
Check the server entry
Open Home and review the name and settings of an existing server. To add your own subscription, tap “+” in the upper-right corner of Home → Type → Subscribe, enter your subscription URL, and save. Do not enter a subscription URL as though it were a single server address.
-
Select a server
On Home, tap the server you want to use and check for the DOT selection indicator. Editing an entry changes its settings; tapping an entry in the list selects the server. These are two different actions.
-
Check the routing mode
Go to Home → Global Routing and check whether Config, Proxy, Direct, or Scene is selected. To use rules, select Config and then verify the active file in the Config tab.
-
Connect
Return to Home and turn on the connection. If iOS asks to add a VPN configuration for the first time, approve it as prompted. System permission allows the connection to be established; it does not replace server authentication.
-
Verify access
Run Connectivity Test on Home, then try a known destination. If the test and actual access do not match, note the time, selected server, and Global Routing mode, then check Data. Avoid changing several settings at once.
3. Global Routing: Config, Proxy, Direct, and Scene
Global Routing controls how traffic is handled; it is not the connection switch. With the connection on, Direct can still route requests directly. So seeing a VPN status indicator does not, by itself, prove that a particular request went through a proxy. To investigate a request, consider the routing mode, configuration rules, and request records together.
| Option | Meaning | What to check |
|---|---|---|
| Config | Routes requests according to the rules in the active configuration file. | Confirm the file is selected, then check rule order and policies. |
| Proxy | Routes requests through a proxy. | Confirm the selected proxy is available; this option does not detect protocols automatically. |
| Direct | Routes requests directly. | Direct access depends on your current network and the destination service. |
| Scene | Uses the routing setup defined by a scene. | Review the scene’s settings; its name alone does not tell you where requests will go. |
Proxy can help narrow down a problem, for example by checking whether it is related to a particular routing rule; it does not guarantee that a server is available. Direct can help you compare results with direct access on your current network, but it does not mean the app is disconnected. Scene requires you to understand the scene already configured; do not treat it as an automatic fix when its settings are unclear.
Checks for rule-based use and temporary troubleshooting
For everyday rule-based routing
- Home → Global Routing → Config。
- Check the active configuration file in the Config tab.
- See which rule and policy match the destination domain.
For a temporary comparison
- Note the current Global Routing option first.
- Switch only one option at a time: Proxy or Direct.
- Repeat the same request, then restore the original setting.
Changing the routing mode helps compare paths. It does not replace checking server settings, and one request cannot tell you how all traffic will be handled.
4. Config: Reading Configuration Files and Rule Keywords
Config is more than another view of your server list. A configuration file can include rules, DNS, and other settings; Subscribe is mainly used to update server entries. They serve different purposes. If a domain still follows the same route after Subscribe updates, check the active Config file and Global Routing instead of importing the same subscription again.
When reading rules, check the match target first, then the action, and finally the order. The snippets below explain the syntax; they are not a complete configuration and are not intended to replace your current file. In the examples, example.com is a reserved example domain, and 192.0.2.0/24 is a documentation-only address range, not a connectable server.
[Rule]
DOMAIN-SUFFIX,example.com,DIRECT
IP-CIDR,192.0.2.0/24,DIRECT
GEOIP,CN,DIRECT
FINAL,PROXYDOMAIN-SUFFIX,example.com,DIRECT: Matches the domain suffix, includingexample.comand its subdomains.DIRECTis the direct-routing policy for this rule.IP-CIDR,192.0.2.0/24,DIRECT: Matches an IP address range, not text in a webpage title or domain name.GEOIP,CN,DIRECT: Matches using geographic data for the destination IP. It does not classify traffic by device language or webpage language.FINAL,PROXY: Sets the fallback policy for requests that do not match earlier rules. It is usually placed at the end of the rule list.
Rules are evaluated in order, so an earlier match affects what happens next. Check specific rules alongside broader ones; placing a fallback rule too early can prevent later rules from being evaluated as intended. Domain rules and IP rules are not interchangeable, and IP-based decisions should be considered in light of the resolved address.
5. Data and Settings: View Records and Adjust Behavior
Data is for viewing request and traffic information, not for adding servers. When troubleshooting, make one identifiable request first, then check the records from around that time. Look at the destination, the visible handling result, and related traffic details; available fields and record coverage depend on the current app interface. No record does not prove that the destination received no request or that the server is faulty.
Settings is where you adjust app behavior. You do not need to review every switch when getting started; change a setting only when it relates to the issue. For example, if the connection returns after you disconnect it manually, check Settings → On Demand. If you need to change how subscription updates are routed, check Settings → Subscribe. Note the original value before making a change so you can restore it and compare results.
| Location | What it helps you check | What it does not prove |
|---|---|---|
| Data | Review request and traffic records for a particular access attempt. | Traffic activity does not mean the destination service responded successfully. |
| Settings → On Demand | Check settings that trigger a connection under specific conditions. | Turning it on does not guarantee a successful connection on every network. |
| Settings → Subscribe | Review settings related to subscription updates. | A successful refresh does not mean every server is reachable. |
| Settings → Subscribe → Update via Proxy | Choose whether subscription updates use a proxy. | If the proxy itself is unavailable, enabling this option will not resolve a timeout. |
On Demand and Global Routing operate at different levels: On Demand controls when a connection is established under specified conditions, while Global Routing controls how traffic is handled during a connection. Turning off On Demand does not change Global Routing to Direct; selecting Config does not enable automatic connections. If a setting change has no visible effect, first check whether you changed connection triggers or traffic routing.
6. Common Misreadings: Check Where the Option Appears
I opened Config. Why is all my traffic still going through a proxy?
Opening the Config tab only takes you to the configuration page. Go to Home → Global Routing and check that Config is selected, not Proxy. Then return to Config and check the active file and its rules. If the fallback policy is PROXY and the destination does not match an earlier rule, using a proxy may be exactly what the file specifies.
I selected Direct. Why does the system still show a VPN status?
Direct is a routing mode, not a connection switch. Check Home to see whether the connection is still on; turn off the connection switch to end it. If it reconnects afterward, check Settings → On Demand. VPN status alone does not show whether a particular request used a proxy.
Subscribe updated successfully. Why won’t the website load?
A successful refresh only means the subscription was retrieved and processed; it does not guarantee connectivity. Return to Home, check the DOT selection indicator, run Connectivity Test, and then review Global Routing and the server settings. The subscription’s refresh time does not prove that server authentication is valid or the destination is reachable.
Data shows a request. Does that mean the connection is working?
No. A record means the app observed related activity; check the handling result and the actual page response as well. Note the time and domain of the failed request, then compare it with nearby records. Before sharing troubleshooting details, hide tokens, passwords, and other sensitive information in the subscription URL.
There is no need to translate each term to remember the workflow: use Home to select a server and connect, Global Routing to choose how traffic is handled, Config to review configuration, Data to inspect records, and Settings to adjust behavior. If an entry appears in a different place than described, follow the current app interface rather than guessing what a switch does from its label alone.
- Before connecting: Check your existing service, selected server, and Global Routing mode.
- When a problem occurs: Repeat one request, note the time, and change one condition at a time.
- After troubleshooting: Undo temporary changes, then verify your usual configuration.