LOWERTOP/Shadowrocket
Shadowrocket
Shadowrocket is a proxy client application for mobile devices that functions as a multi-protocol proxy manager and a rule-based traffic router. It acts as a programmable network gateway, utilizing a virtual network interface to route system-level traffic through secure tunnels.
The project distinguishes itself through a programmable environment that executes JavaScript scripts and modules to automate DNS resolution and handle complex network request logic. It further provides an HTTPS traffic inspector capable of decrypting encrypted traffic using custom certificates to modify headers and rewrite URL content.
The system covers a broad range of traffic management capabilities, including multi-hop proxy chaining, app-level traffic splitting, and automated node failover. It manages network configurations via domain-to-IP mapping, encrypted DNS overrides, and remote rule set routing. Additionally, it includes tools for monitoring network activity, analyzing traffic statistics, and synchronizing configurations across devices via iCloud.
Features
- Proxy Client Applications - Functions as a mobile application designed to route device traffic through remote proxy servers for privacy and access.
- Traffic Routing Rules - Matches network requests against domain patterns and IP ranges to determine the appropriate proxy policy.
- Proxy DNS Routers - Routes DNS resolution through a proxy's internal client to prevent leaks and bypass regional blocks.
- DNS Override Resolvers - Intercepts system DNS queries and routes them through proxy tunnels using encrypted protocols to prevent leaks.
- Multi-Protocol Proxy Clients - Provides a client-side manager capable of handling various proxy protocols for flexible communication and connectivity.
- Programmable Gateways - Implements a programmable network gateway that executes JavaScript to automate DNS resolution and network request logic.
- Failover Proxy Routers - Automatically switches to a backup proxy server when the active connection fails to maintain uptime.
- Rule-Based - Directs network requests via proxy, direct, or reject policies using domain, IP, and GeoIP rules.
- Local - Creates a virtual network interface on the device to intercept system-level traffic and route it through proxies.
- Embedded Script Execution - Provides a programmable environment to run custom JavaScript scripts for HTTP requests and DNS resolution logic.
- Sandboxed JavaScript Execution - Executes custom JavaScript to implement advanced logic for network requests, DNS resolution, and scheduled tasks.
- App-Based Traffic Control - Assigns specific proxy strategies to individual applications by matching domain or IP fingerprints.
- Traffic Decryption - Intercepts and decrypts TLS-encrypted HTTPS traffic using custom root certificates for analysis and modification.
- Proxy Node Failover - Automatically switches to a functional proxy node when the current connection fails.
- Configuration Inheritance - Implements hierarchical configuration structures where secondary profiles inherit and override settings from a primary base file.
- File-Based Configuration - Supports importing and editing text files to define network parameters, routing rules, and scripts.
- On-Demand Tunnel Activation - Triggers a VPN connection automatically when specific domains, DNS servers, or Wi-Fi networks are detected.
- Domain-to-IP Mappings - Provides static associations between domain names and IP addresses to bypass DNS resolution.
- Connection-Aware Routing Scenes - Switches routing modes and configurations automatically based on the active network connection.
- Proxy Bypass Lists - Provides lists of domains and IP addresses configured to connect directly, bypassing the proxy server.
- Proxy Connectivity Testing - Measures network latency and reachability using various request types to identify the most responsive proxy servers.
- Proxy Group Managers - Provides systems for organizing network nodes into logical groups with automated health checks and load balancing.
- Proxy Node Aggregators - Supports importing server configurations and curated proxy node lists via QR codes and subscription URLs.
- Proxy Chaining - Sequentially routes network packets through multiple proxy servers to create a nested relay tunnel.
- Proxy Subscription Updates - Automatically refreshes proxy server lists in the background or on launch via subscription URLs.
- Regex-Based Request Modifications - Modifies URL patterns and HTTP headers using regular expressions to alter network traffic on the fly.
- Dynamic Proxy Selection - Automatically chooses the best proxy node based on latency testing, load balancing, or random selection.
- UDP Proxies - Transmits UDP packets through proxy nodes to support real-time services like gaming and voice calls.
- HTTPS Filtering - Decrypts encrypted HTTPS traffic using custom certificates to modify headers and rewrite URL content.
- Transparent HTTPS Inspections - Intercepts and decrypts HTTPS traffic using locally generated root certificates for debugging and analysis.
- Routing Extension Modules - Allows the addition of functional modules that provide specialized rules, scripts, and certificates with high priority.
- Network Traffic Logs - Records request data and matching rules to provide persistent network traffic logs for debugging.
- Protocol Debugging Logs - Provides detailed protocol debugging logs to troubleshoot network activity and traffic routing.
- HTTP Header Manipulators - Provides utilities for adding, deleting, or replacing HTTP request and response headers using regular expressions.
- URL Redirections - Intercepts URL patterns and redirects them to different destinations via custom HTTP responses.
- Client Customization - Primary source for client themes and UI customization.
- Shadowrocket Configuration - Core repository for client configuration and management.
