Rocket Proxy for Shadowrocket

Rocket Proxy is a fast, private routing utility for Android. It is a
client, not a subscription service: you bring your own server. There is no
account to create and nothing to sign up for.

HOW IT WORKS — SECURITY IS THE CORE FUNCTIONALITY

Rocket Proxy uses Android's VpnService API to create a device-level tunnel.
This is the app's only purpose; it does nothing else. Add a server by pasting a
share link, tap it, and you are connected.

When you tap connect, the app first explains in plain language that it will
create a local network interface and route your traffic through the server you
chose. Android then shows its own system consent dialog, and nothing is
routed until you allow it. While the tunnel is running, a VPN key icon stays in
your status bar and an ongoing notification shows the connected server with a
Disconnect button.

Traffic between your device and your server is encrypted end to end using the
protocol you selected — WireGuard, TLS-based protocols such as VLESS, Trojan and AnyTLS, or AEAD ciphers such as Shadowsocks 2022. We operate no server in the middle: the tunnel runs from your device to the server you configured.

Rocket Proxy never redirects or manipulates your traffic to make money from it. There is no advertising SDK, no ad injection and no traffic resale.

PRIVACY BY DESIGN

The app contains no analytics and no crash-reporting libraries. Your browsing
activity is never collected, stored or shared, because there is nowhere for it
to go — we do not operate a logging service, and the app has no telemetry to
send. Apart from the server you choose, it reaches the internet in only a few
places: on launch it checks for an updated, digitally signed copy of its
free-server list and settings; and only when you ask, it fetches ad-blocking
rule lists, regional rule sets, the GeoIP database, community node feeds, or
the encrypted DNS resolver you configure. None of these requests carries an
identifier or any information about you, and every URL is visible in the app.

Your server list stays on your device.

BRING YOUR CLASH OR STASH CONFIG — IN FULL

Import a Clash or Stash YAML profile by pasting it, opening a file, or giving
the app an HTTPS link. Proxies, proxy groups and rules all come across, and the app tells you exactly what it imported and what it could not.

FEATURES

• Add servers by share link, QR code, or Clash/Stash YAML profile
• Test all servers and see which respond fastest
• Routing rules — send some traffic through the proxy, some direct, and block
the rest, by domain, keyword, IP range, port or country
• Policy groups — switch servers without dropping your connection
• Per-app routing — choose exactly which apps use the tunnel
• Ad and tracker blocking, off by default
• Streaming Mode — one tap adds routing rules for a streaming service
• Regional rule sets — community lists for commonly region-locked services,
off by default
• Free Nodes — optional community server feeds, off by default and behind a
plain-language warning that they are unverified
• Wi-Fi Upload — send a config from your computer's browser, protected by a
one-time passcode and confirmed on the phone
• Choose the DNS resolvers used inside the tunnel; lookups go through the
tunnel, not around it, and DoH or DoT resolvers are spoken encrypted
• Auto-connect on the networks you choose
• Data insights over 24 hours, 7 days or 30 days, and live counters
• Connection log so you can see exactly what the app is doing
• Clean, native dark interface built with Jetpack Compose

IMPORTANT — PLEASE READ

Rocket Proxy does not include or sell servers. You need access to a server to
use it. Whoever operates the server you choose can see the traffic you send
through it, so only connect to servers you trust and control. You are
responsible for complying with the laws and network policies that apply to you.