Whole-device routing
Shadowrocket covers Safari and native iOS apps through the device VPN profile, so your ProxyOmega residential IP applies system-wide, not just in a browser.
Integration Proxy manager
Shadowrocket Integration
Shadowrocket is the most popular way to run a proxy on an iPhone or iPad, routing iOS traffic through a server you define. This guide covers adding a ProxyOmega endpoint as a Shadowrocket server, choosing SOCKS5 or HTTP, entering username and password authentication, and turning it on. Steps follow the current Shadowrocket interface on iOS.
- 200+countries
- 1.5M+residential IPs
- SOCKS5on every port
Shadowrocket
What is Shadowrocket?
Shadowrocket is a paid iOS app that acts as a rule-based proxy client for iPhone and iPad. It builds a local VPN profile on the device and funnels traffic through whichever server you configure, supporting SOCKS5, HTTP, HTTPS, Shadowsocks, and several other protocols. For proxy users it is the standard tool for putting a residential IP on an Apple mobile device.
The app organises everything around servers and rules. A server entry holds the type, host, port, and credentials of an exit. Rules can then route specific domains or apps through specific servers, or connect them directly. For a straightforward setup you can add one server and switch it on globally.
Because Shadowrocket routes at the device level through the iOS VPN mechanism, it covers Safari and native apps alike, not just a single browser. That makes it well suited to mobile QA, checking geo-restricted content on iOS, and managing accounts from a phone or tablet. The app also keeps a per-connection log, so you can see exactly which server each request used and whether it matched a rule or fell through to the default.
Shadowrocket
Why pair Shadowrocket with residential proxies
Shadowrocket gets traffic off the device and to a server; ProxyOmega determines the address that server presents. Combining them lets an iPhone or iPad appear to browse from a real residential connection in the country you choose, across Safari and apps.
Real mobile-friendly IPs
Pair Shadowrocket with the Mobile plan for genuine 4G/5G carrier IPs, or with residential plans for consumer broadband addresses, matching whatever the target expects.
Per-app and per-site rules
Shadowrocket's rule system can send only the domains you care about through the proxy while everything else stays direct, keeping the rest of the device fast.
Shadowrocket
How to add ProxyOmega to Shadowrocket
From the ProxyOmega dashboard, note your username with any targeting parameters and your account API key, which is used as the password. Then add the server in Shadowrocket.
- Open Shadowrocket and tap the + in the top-right corner to add a new server.
- In Type, choose SOCKS5 (or HTTP if you prefer an HTTP-style proxy).
- In Host, enter your plan's endpoint, for example residential.proxyomega.com.
- In Port, enter a port from your plan's range, for example 10000.
- In User, enter your username with any targeting parameters, for example youruser-country-us.
- In Password, enter your dashboard API key.
- Tap Done in the top-right to save the server.
- Back on the main screen, tap the row for your server so it is selected, then flip the master toggle at the top on.
- Approve the iOS VPN configuration prompt the first time you enable Shadowrocket.
- Open Safari, visit ipinfo.io, and confirm the IP and country match your expectation.
Shadowrocket
Choosing SOCKS5 vs HTTP and a plan
Shadowrocket supports both SOCKS5 and HTTP proxy types, and every ProxyOmega port serves HTTP, HTTPS, and SOCKS5 at once, so switching the Type never means changing the port. SOCKS5 is the usual pick because it carries all TCP traffic and forwards DNS through the tunnel, which suits full-device routing across apps. HTTP is fine for browser-style traffic if you prefer it. The host, port, user, and password stay identical either way.
On iOS, the Mobile plan is a natural companion when a target expects a carrier IP, but any plan works. Because Shadowrocket routes the whole device, remember that background app refresh and system services will also travel through the proxy, which counts toward usage on pay-per-GB plans. Pick by target.
| Workload | Plan | Why |
|---|---|---|
| General iOS browsing, rotating IPs | Budget Unlimited | Fresh residential IP per port; -country-xx targets a country |
| Heavier mobile sessions | Premium Unlimited | Higher-speed residential on premium.proxyomega.com:8000 |
| City, state, or ASN targeting, pay per GB | Platinum | Precise geo control on platinum.proxyomega.com:20228 |
| Apps that require a mobile network | Mobile | Real 4G/5G carrier IPs on mobile.proxyomega.com:20229 |
| A fixed IP for logins or allowlists | Static ISP | Stable US IP (Dallas) on isp.proxyomega.com, ports 30000-30099 |
Shadowrocket
Troubleshooting
iOS proxy issues in Shadowrocket usually trace back to the credentials, the username suffix, or the VPN permission. Work through the cards below, and check Shadowrocket's own connection log for the specific failure.
Connection refused / 407
A 407 means authentication failed. Confirm the Password field holds your dashboard API key rather than your login password, and that the username's targeting parameters are valid, since an unsupported parameter also returns 407. If you use IP whitelisting, note that once any IP is whitelisted only those IPs can connect, so your phone's current address must be on the list.
No traffic after enabling
Make sure you approved the iOS VPN configuration prompt and that the server row is selected before toggling on. If you switched networks, the mobile IP may have changed, which matters when you authenticate by whitelist. Toggle Shadowrocket off and on to rebuild the tunnel.
Some apps ignore the proxy
A few apps use certificate pinning or their own networking and may bypass or fail through any proxy. Test in Safari first to confirm the proxy itself works, then adjust Shadowrocket rules for the specific app.
FAQ
Frequently asked questions
Which proxy type should I choose in Shadowrocket?
SOCKS5 is the best default because it carries all TCP traffic and forwards DNS through the tunnel. HTTP works for browser-style traffic. Every ProxyOmega port serves both, so you keep the same port and only change the Type.
What goes in the User and Password fields?
User is your ProxyOmega account username plus any dash-separated targeting parameters, such as youruser-country-us. Password is the account API key from your dashboard, not your website login password.
Do I need to approve a VPN profile?
Yes. The first time you enable Shadowrocket, iOS asks you to allow a VPN configuration. This is how Shadowrocket captures device traffic; approve it once and it stays configured.
How do I target a country or keep the same IP?
Append -country- and a two-letter code to the username, such as youruser-country-jp. For a sticky IP, add -session- with an ID and -ttl- with minutes, for example youruser-session-m9-ttl-20.
Which plan is best for a mobile device?
Any plan works over Shadowrocket. Choose Mobile (mobile.proxyomega.com:20229) when a target expects a carrier IP, or a residential plan such as Budget Unlimited for consumer broadband addresses.
Why does the IP still look local?
Confirm the server row is selected and the master toggle is on, that the VPN profile was approved, and that you are testing in Safari at ipinfo.io. If nothing changed, re-check the host, port, and credentials in the server entry.
Put a residential IP on your iPhone Start routing today.
Add a ProxyOmega server to Shadowrocket and route iOS traffic.
ProxyOmega