How to Set Up Evomi Proxies in Shadowrocket on iOS


Sarah Whitmore
Setup Guides
Shadowrocket is a rule-based proxy client for iOS that gives you granular control over how your iPhone or iPad routes network traffic. Unlike a system-wide toggle, it lets you decide which apps and domains go through a proxy and which use your direct connection. Paired with Evomi's proxies, it's a clean way to test geo-specific content, run privacy-conscious browsing, or verify how a site behaves from another region.
Evomi is a Swiss-based provider of ethically sourced residential, mobile, datacenter, and static ISP proxies. This guide walks through configuring any of them inside Shadowrocket, explains the port and protocol choices, and covers the rule-based routing that makes the app genuinely useful.
Before You Start
You'll need three things ready:
An iPhone or iPad with Shadowrocket installed. It's a paid App Store app, and the rule engine is worth it.
An active Evomi plan. If you're new, residential, mobile, and datacenter plans all include a free trial.
Your Evomi proxy credentials — endpoint, port, username, and password. These live in your Evomi dashboard once you've signed up.
Your Evomi Connection Details
Every Evomi product uses a dedicated endpoint (hostname) and a set of ports, one per protocol. Here's the breakdown:
Host / Endpoint: the address of the proxy gateway (for example,
rp.evomi.comfor residential).Port: selects the protocol — HTTP, HTTPS, or SOCKS5 each have their own port number.
Username & Password: your authentication pair, so only your account can use the proxy.
The endpoints and ports for each product:
Proxy Type | Endpoint | Protocol | Port |
|---|---|---|---|
Residential |
| HTTP | 1000 |
Residential |
| HTTPS | 1001 |
Residential |
| SOCKS5 | 1002 |
Datacenter |
| HTTP | 2000 |
Datacenter |
| HTTPS | 2001 |
Datacenter |
| SOCKS5 | 2002 |
Mobile |
| HTTP | 3000 |
Mobile |
| HTTPS | 3001 |
Mobile |
| SOCKS5 | 3002 |
Static ISP | Your assigned IP | HTTP | 12345 |
Static ISP | Your assigned IP | SOCKS5 (UDP) | 12346 |
Note on Static ISP: the endpoint is the dedicated IP address assigned to you at purchase. There's no separate HTTPS port — the HTTP port carries HTTPS traffic fine, and SOCKS5 handles everything else.
Configuring an Evomi Proxy in Shadowrocket
The whole process takes a minute or two once your credentials are in front of you.
Open Shadowrocket and land on the Home tab.
Add a server. Tap the plus icon (
+) in the top-right corner, then choose Add Server. The Subscribe option is for importing multiple servers at once — for a single Evomi proxy, stick with Add Server.Pick the protocol. Tap Type and match it to your chosen port:
HTTP — for an HTTP port (e.g. 1000 on residential).
HTTPS — for an HTTPS port (e.g. 1001). The link to the proxy itself is encrypted.
SOCKS5 — for a SOCKS5 port (e.g. 1002). The most flexible option; it forwards any TCP traffic, not just web requests.
Enter your details. Fill the fields from your dashboard:
Host: the endpoint, e.g.
rp.evomi.com.Port: the port that matches the protocol you selected.
User and Password: your Evomi credentials.
Remarks: a recognisable label like Evomi Residential US — handy once you save several proxies.
You can leave the Method and Obfuscation fields alone; username/password authentication covers standard HTTP, HTTPS, and SOCKS5 setups.
Save with the checkmark or Done in the top-right corner.
Select and connect. Back on the server list, tap your new entry so a checkmark appears next to it. On the Home tab, flip the top switch from Not Connected to on. The first time, iOS asks to add a VPN configuration — allow it. Shadowrocket uses Apple's VPN framework to route traffic through the proxy.
Verify. Open Safari and visit geo.evomi.com. The IP and location shown should now be the proxy's, not your own.
That's the full setup. Your device is now routing traffic through Evomi.
Which Evomi Proxy Fits Your Use Case
There's no single "best" product — it depends on what you're doing:
Residential — IPs from real home connections. A strong default for general browsing, testing geo-restricted public content, and research where a residential IP is expected.
Mobile — carrier-network IPs, ideal when a task specifically needs a mobile address, such as QA on a mobile app across regions or managing accounts you own on mobile-centric platforms in line with their terms.
Datacenter — fast and stable, and the most affordable at $0.30/GB. Great for speed-sensitive browsing and market research on public data.
Static ISP — a dedicated IP that pairs datacenter stability with an ISP-issued address, from $1/IP. Best when you need the same IP over a longer session.
Unsure? Residential is the versatile all-rounder. You can start a free trial on residential, mobile, or datacenter to see which suits your workflow.
Getting More Out of Shadowrocket's Routing
The reason to reach for Shadowrocket over a plain VPN toggle is its rule engine.
Global mode sends everything through the selected proxy. Simple, but blunt.
Rule (Config) mode lets you match by app, domain, or traffic type and decide what goes through the proxy versus your direct link. You could send only Safari through the proxy, or exclude local services entirely. It takes a little configuration — usually a config file — but the control is the whole point.
A few practical notes:
Battery: an always-on connection, especially in Global mode, draws more power. Disconnect when you're not using it.
Protocol choice: HTTP/HTTPS proxies are geared toward web traffic. SOCKS5 is protocol-agnostic and handles a wider range of TCP traffic, so it's a safe pick when in doubt — and every Evomi plan includes it.
Provenance matters: Evomi's IPs are ethically sourced and the infrastructure operates under Swiss privacy standards. Quality sourcing translates directly into more reliable connections.
Troubleshooting
Won't connect? Re-check the host, port, username, and password — one typo is enough to fail. Copy-paste straight from your dashboard. Confirm your plan is active with available bandwidth or IPs, and make sure the port matches the protocol you picked (SOCKS5 on an HTTP port won't work).
Slow? Test your baseline speed with the proxy off first. If you're on rotating residential or mobile, choose a region closer to you, and reconnect to pull a fresh IP if the current one is under load.
An app or site misbehaves? Check your rules if you're in Config mode — a misrouted rule is the usual culprit. You can also validate the proxy string on its own using the Evomi Proxy Tester before blaming Shadowrocket.
Still stuck? Evomi support is happy to help you get connected.
Related Setups
If you manage proxies across more than one device, a couple of companion guides are worth bookmarking: configuring Evomi proxies with Potatso on iOS covers another capable iOS client, and setting up Android proxies mirrors this process on the other platform. For desktop, see our Mac proxy setup guide.
Wrapping Up
Configuring Evomi proxies in Shadowrocket is quick, and the payoff is real control: the right protocol, the right region, and per-app routing when you need it. With ethically sourced Swiss proxies underneath, you get a setup that's both flexible and dependable for privacy-conscious browsing, testing, and research on public data.
Shadowrocket is a rule-based proxy client for iOS that gives you granular control over how your iPhone or iPad routes network traffic. Unlike a system-wide toggle, it lets you decide which apps and domains go through a proxy and which use your direct connection. Paired with Evomi's proxies, it's a clean way to test geo-specific content, run privacy-conscious browsing, or verify how a site behaves from another region.
Evomi is a Swiss-based provider of ethically sourced residential, mobile, datacenter, and static ISP proxies. This guide walks through configuring any of them inside Shadowrocket, explains the port and protocol choices, and covers the rule-based routing that makes the app genuinely useful.
Before You Start
You'll need three things ready:
An iPhone or iPad with Shadowrocket installed. It's a paid App Store app, and the rule engine is worth it.
An active Evomi plan. If you're new, residential, mobile, and datacenter plans all include a free trial.
Your Evomi proxy credentials — endpoint, port, username, and password. These live in your Evomi dashboard once you've signed up.
Your Evomi Connection Details
Every Evomi product uses a dedicated endpoint (hostname) and a set of ports, one per protocol. Here's the breakdown:
Host / Endpoint: the address of the proxy gateway (for example,
rp.evomi.comfor residential).Port: selects the protocol — HTTP, HTTPS, or SOCKS5 each have their own port number.
Username & Password: your authentication pair, so only your account can use the proxy.
The endpoints and ports for each product:
Proxy Type | Endpoint | Protocol | Port |
|---|---|---|---|
Residential |
| HTTP | 1000 |
Residential |
| HTTPS | 1001 |
Residential |
| SOCKS5 | 1002 |
Datacenter |
| HTTP | 2000 |
Datacenter |
| HTTPS | 2001 |
Datacenter |
| SOCKS5 | 2002 |
Mobile |
| HTTP | 3000 |
Mobile |
| HTTPS | 3001 |
Mobile |
| SOCKS5 | 3002 |
Static ISP | Your assigned IP | HTTP | 12345 |
Static ISP | Your assigned IP | SOCKS5 (UDP) | 12346 |
Note on Static ISP: the endpoint is the dedicated IP address assigned to you at purchase. There's no separate HTTPS port — the HTTP port carries HTTPS traffic fine, and SOCKS5 handles everything else.
Configuring an Evomi Proxy in Shadowrocket
The whole process takes a minute or two once your credentials are in front of you.
Open Shadowrocket and land on the Home tab.
Add a server. Tap the plus icon (
+) in the top-right corner, then choose Add Server. The Subscribe option is for importing multiple servers at once — for a single Evomi proxy, stick with Add Server.Pick the protocol. Tap Type and match it to your chosen port:
HTTP — for an HTTP port (e.g. 1000 on residential).
HTTPS — for an HTTPS port (e.g. 1001). The link to the proxy itself is encrypted.
SOCKS5 — for a SOCKS5 port (e.g. 1002). The most flexible option; it forwards any TCP traffic, not just web requests.
Enter your details. Fill the fields from your dashboard:
Host: the endpoint, e.g.
rp.evomi.com.Port: the port that matches the protocol you selected.
User and Password: your Evomi credentials.
Remarks: a recognisable label like Evomi Residential US — handy once you save several proxies.
You can leave the Method and Obfuscation fields alone; username/password authentication covers standard HTTP, HTTPS, and SOCKS5 setups.
Save with the checkmark or Done in the top-right corner.
Select and connect. Back on the server list, tap your new entry so a checkmark appears next to it. On the Home tab, flip the top switch from Not Connected to on. The first time, iOS asks to add a VPN configuration — allow it. Shadowrocket uses Apple's VPN framework to route traffic through the proxy.
Verify. Open Safari and visit geo.evomi.com. The IP and location shown should now be the proxy's, not your own.
That's the full setup. Your device is now routing traffic through Evomi.
Which Evomi Proxy Fits Your Use Case
There's no single "best" product — it depends on what you're doing:
Residential — IPs from real home connections. A strong default for general browsing, testing geo-restricted public content, and research where a residential IP is expected.
Mobile — carrier-network IPs, ideal when a task specifically needs a mobile address, such as QA on a mobile app across regions or managing accounts you own on mobile-centric platforms in line with their terms.
Datacenter — fast and stable, and the most affordable at $0.30/GB. Great for speed-sensitive browsing and market research on public data.
Static ISP — a dedicated IP that pairs datacenter stability with an ISP-issued address, from $1/IP. Best when you need the same IP over a longer session.
Unsure? Residential is the versatile all-rounder. You can start a free trial on residential, mobile, or datacenter to see which suits your workflow.
Getting More Out of Shadowrocket's Routing
The reason to reach for Shadowrocket over a plain VPN toggle is its rule engine.
Global mode sends everything through the selected proxy. Simple, but blunt.
Rule (Config) mode lets you match by app, domain, or traffic type and decide what goes through the proxy versus your direct link. You could send only Safari through the proxy, or exclude local services entirely. It takes a little configuration — usually a config file — but the control is the whole point.
A few practical notes:
Battery: an always-on connection, especially in Global mode, draws more power. Disconnect when you're not using it.
Protocol choice: HTTP/HTTPS proxies are geared toward web traffic. SOCKS5 is protocol-agnostic and handles a wider range of TCP traffic, so it's a safe pick when in doubt — and every Evomi plan includes it.
Provenance matters: Evomi's IPs are ethically sourced and the infrastructure operates under Swiss privacy standards. Quality sourcing translates directly into more reliable connections.
Troubleshooting
Won't connect? Re-check the host, port, username, and password — one typo is enough to fail. Copy-paste straight from your dashboard. Confirm your plan is active with available bandwidth or IPs, and make sure the port matches the protocol you picked (SOCKS5 on an HTTP port won't work).
Slow? Test your baseline speed with the proxy off first. If you're on rotating residential or mobile, choose a region closer to you, and reconnect to pull a fresh IP if the current one is under load.
An app or site misbehaves? Check your rules if you're in Config mode — a misrouted rule is the usual culprit. You can also validate the proxy string on its own using the Evomi Proxy Tester before blaming Shadowrocket.
Still stuck? Evomi support is happy to help you get connected.
Related Setups
If you manage proxies across more than one device, a couple of companion guides are worth bookmarking: configuring Evomi proxies with Potatso on iOS covers another capable iOS client, and setting up Android proxies mirrors this process on the other platform. For desktop, see our Mac proxy setup guide.
Wrapping Up
Configuring Evomi proxies in Shadowrocket is quick, and the payoff is real control: the right protocol, the right region, and per-app routing when you need it. With ethically sourced Swiss proxies underneath, you get a setup that's both flexible and dependable for privacy-conscious browsing, testing, and research on public data.

Author
Sarah Whitmore
Digital Privacy & Cybersecurity Consultant
About Author
Sarah is a cybersecurity strategist with a passion for online privacy and digital security. She explores how proxies, VPNs, and encryption tools protect users from tracking, cyber threats, and data breaches. With years of experience in cybersecurity consulting, she provides practical insights into safeguarding sensitive data in an increasingly digital world.



