Shadowrocket

Rule based proxy utility client for iPhone/iPad.

• Capture all HTTP/HTTPS/TCP traffic from any applications on your device, and redirect to the proxy server.
• Record and display HTTP, HTTPS, DNS requests from your iOS devices.
• Configure rules using domain match, domain suffix, domain keyword, CIDR IP range, and/or GeoIP lookup.
• Measure traffic usage and network speed on WiFi, cellular, direct and proxy connections.
• Import rule files from URL or iCloud Drive.
• Block ads by domain, user agent rules.
• Local DNS Mapping.
• Work on cellular networks.
• Decrypt HTTPS traffic.
• Perform URL rewrite.
• Fully IPv6 supports.
• Script filter supports.
• Multi-level forward proxy.
• Support kcptun, cloak, gost, v2ray plugins.
• Support DNS over HTTPS, DNS over TLS, DNS over QUIC.

• feat(protocol): add Sudoku proxy protocol support and optimize data-path forwarding to reduce memory allocations and buffer copying
• feat(dns): support dedicated DNS routing for direct domains, DNS over TCP, DNSCrypt upstreams, and multiple servers in CNAME/Host rules
• feat(tailscale): migrate login to TS2021, support subnet routing and exit nodes, and introduce low-power tunnel suspension on demand
• feat(protocol): support Clash SSH/packetaddr subscription imports
• feat(macos): add menu bar routing controls and quick server configurations for macOS
• feat(group): add an independent ping-based auto-sort option for policy groups
• perf(transport): handle KCP backpressure, harden WireGuard/Hysteria packet security, and restore full upload throughput on QUIC transports
• fix(vpn): prevent tunnel startup hangs, preserve local device connectivity, and prevent stale speedtests from resetting VPN states
• fix(dns): route host resolutions and QUIC endpoints through tunnel resolver, and reuse H2 addresses for H3 upgrades
• fix(tailscale): advertise disco keys for direct paths, respect custom DERP TLS verification, and fix battery drain when VPN is disconnected
• fix(rule): fix remote rule set refreshes, preserve quoted rewrite tokens during parsing/export, and guard compiled policy group updates
• fix(system): support WebKit scoped globals and fetch polyfills in scripts, and apply tombstone-based iCloud manifest to prevent configuration rollbacks
• fix(system): prevent WKWebView/JavaScriptCore teardown crashes and limit proxy stream memory growth to prevent OOM

Please note: Shadowrocket is a standalone networking utility and does not include any proxy services or server resources. Users are responsible for providing their own configurations.