Install guides, connection fixes, and platform notes. Check the FAQ and download page for version and package details.
If one hostname goes the wrong way, read the first matching rule from the top. A DOMAIN-SUFFIX pinned under FINAL never runs. GEOIP,CN does not mean office LAN. PROCESS-NAME is mostly dead on iPhone.
Read more →MITM shows real hostnames and also breaks pinning, parks a user CA on the device, and is a terrible default on a banked phone or a kid’s iPad. Ten minutes of debugging is fine. Leave it off.
Read more →The big switch is green and one app is dead: the group is pointing at a name the subscription no longer has, or URL Test is probing a URL the whole planet REJECTS. Pick a live node by hand before you rewrite rules.
Read more →The VPN glyph blinks when you leave a building. Disable Wi-Fi Assist, stop On Demand from tearing the tunnel on every unknown SSID, and wait for LTE to exist. Swapping nodes will not fix those fifteen seconds.
Read more →After an ads module, a login page is blank, URL Test is all-red, or checkout returns 404. Disable modules first. Exempt the host. Do not rotate providers.
Read more →Nodes remain, URL Test may even print numbers, TCP resets anyway. Read traffic and expiry on the subscription row before you rewrite the URL. A cached list after the bill died is a liar. Resetting the app will not extend the plan.
Read more →Subscribe URLs fit providers that rotate nodes. QR codes fit in-person handoff. Manual nodes fit a line you own. Always tap Update before you blame rules.
Read more →Nodes are exits. Rules decide who uses them. A green node with Direct on Instagram is not a dead server. Prove the node in global mode first.
Read more →URL Test measures the probe URL, not Netflix. Set the URL your provider documents, then open a real page before you trust the green number.
Read more →Wrong DNS settings leave nodes green and Safari spinning. Use a DoH upstream you can name. If Fake-IP breaks a bank app, turn it off before deleting the subscription.
Read more →Catalogs care about exit plus rules. A matching flag with Direct on the video host yields a homepage and no episode. Disable URL Test hopping mid-playback.
Read more →On Demand can raise Shadowrocket on cellular and drop it on home Wi-Fi. Invert the SSID list and printers disappear. Hotels still need the portal first.
Read more →The subscribe URL in a password manager beats a screenshot of nodes. Export the profile, note policy groups, and never drop key QR codes in a chat.
Read more →The URL often works. VMess path, TLS, and UDP flags do not always. Import the sub, test one node that already works on iOS, then add rules.
Read more →MITM shows encrypted hostnames and installs a certificate. Leave it off for banks, MDM phones, and anyone who does not manage certs. It will not unlock a catalog.
Read more →Split the fault: the URL will not fetch, or it fetched and handshakes die. The first is paste/UA/quota. The second is expiry, protocol, or the network dropping UDP.
Read more →