In the landscape of iOS network tools, S-rocket stands as the definitive solution for users demanding granular control over their internet traffic. Priced at just $2.99—less than a cup of coffee—this rule-based proxy utility delivers capabilities that rival enterprise networking equipment, all within a clean, intuitive interface that works seamlessly on iPhone, iPad, and even Apple TV.
Unlike consumer proxy apps that offer binary on/off connectivity, S-rocket provides surgical precision: route specific apps through Tokyo servers while keeping banking apps on direct connection, block ads and trackers system-wide, decrypt HTTPS traffic for inspection, and measure network performance in real-time. This level of control transforms how iOS users interact with the internet—whether they’re privacy-conscious individuals, digital marketers, remote workers, or enterprise IT teams.
This comprehensive guide explores S-rocket architecture, capabilities, setup procedures, and—critically—how to pair it with professional proxy infrastructure like IPFLY to unlock enterprise-grade performance and reliability.

What Is S-rocket ? Technical Architecture and Core Purpose
Defining the S-rocket Solution
S-rocket is a rule-based proxy utility client for iOS that captures and redirects HTTP/HTTPS/TCP traffic from any application on your device to specified proxy servers. Developed by Guangming Li and available exclusively through the App Store, it leverages iOS’s native proxy framework to create a transparent proxy layer without requiring jailbreak or complex configuration.
Key Technical Characteristics:
| Feature | S-rocket Implementation | Typical Consumer proxy |
| Traffic Control | Rule-based, per-app/domain routing | Binary on/off for all traffic |
| Protocols | Shadowsocks, V2Ray, Trojan, SOCKS5, HTTP, HTTPS, WireGuard, Snell | Proprietary or limited selection |
| Encryption | Depends on proxy protocol used | Mandatory AES-256 |
| HTTPS Decryption | Supported for traffic inspection | Not available |
| Ad Blocking | Built-in domain and user agent filtering | Rarely included |
| Scripting | Limited script filtering support | Not available |
| Root Required | No | No |
| Price | $2.99 one-time | $5-15/month subscription |
How S-rocket Works Under the Hood
S-rocket ingeniously repurposes iOS’s proxy API to create a sophisticated proxy infrastructure:
- Proxy Service API Activation: Establishes a virtual proxy interface that captures all outbound network traffic at the system level
- Traffic Inspection: Analyzes each connection request against configured rules—domain matches, GeoIP lookups, CIDR ranges, user agents
- Rule-Based Routing: Applies user-defined rules to determine whether traffic routes through proxy, direct connection, or rejection (blocking)
- Protocol Handling: Negotiates connection with proxy servers using configured protocols (Shadowsocks, V2Ray, SOCKS5, etc.)
- Performance Monitoring: Measures traffic usage, connection speed, latency, and packet loss in real-time
Traffic Flow: App Request → S-rocket Rule Engine → Proxy/Direct/Block Decision → Destination (via proxy if configured)
This architecture enables S-rocket to intercept and control traffic from any installed app—Safari, TikTok, banking apps, games—without modifying individual app settings or requiring system-level privileges beyond standard proxy permissions.
S-rocket Core Features and Capabilities
Essential Functionality
Multi-Protocol Proxy Support: S-rocket supports an extensive range of proxy protocols including Shadowsocks, ShadowsocksR, VMess, VLESS, Trojan, SOCKS5, HTTP, HTTPS, WireGuard, and Snell—enabling compatibility with virtually any proxy infrastructure.
Rule-Based Traffic Management: The defining S-rocket feature. Create sophisticated rules based on:
- Domain matching: Exact domain or suffix matching (e.g.,
google.com,*.netflix.com) - Domain keywords: Partial string matching within domains
- CIDR IP ranges: Route specific IP blocks through designated proxies
- GeoIP lookup: Route traffic based on destination country/region
- User agent: Filter by application or browser identification
HTTPS Traffic Decryption: For comprehensive traffic inspection and rule application, S-rocket supports HTTPS decryption—allowing analysis of encrypted requests that would otherwise bypass filtering.
Ad and Tracker Blocking: Built-in functionality to block advertisements and tracking scripts based on domain lists and user agent patterns, improving privacy and browsing speed.
DNS Enhancement: Supports DNS over HTTPS (DoH), DNS over TLS (DoT), and DNS over QUIC for encrypted, privacy-protecting DNS queries. Local DNS mapping allows custom domain resolution.
Traffic Measurement: Real-time monitoring of WiFi, cellular, direct, and proxy connection statistics including speed, latency, and data usage.
Advanced Configuration Options
Script Filtering: Limited support for script-based filtering enabling dynamic rule application based on runtime conditions.
URL Rewriting: Modify request URLs on-the-fly for testing, debugging, or access optimization.
Proxy Chaining: Route traffic through multiple proxy hops for enhanced anonymity or to bypass complex network restrictions.
Configuration Import/Export: Import rule sets and server configurations from URLs, iCloud Drive, or QR codes; export for backup or sharing.
Subscription Management: Automatically update proxy server lists and rules from remote subscription URLs—essential for services with rotating infrastructure.
S-rocket Setup: Step-by-Step Configuration
Step 1: Installation and Initial Setup
Purchase and Install:
- Search “S-rocket ” on the iOS App Store (requires iOS 12.0 or later)
- Purchase for $2.99 (one-time payment, no subscription)
- Verify developer is Guangming Li to avoid fake apps
- Launch and grant proxy configuration permissions when prompted
Step 2: Adding Proxy Servers
Manual Configuration:
- Tap the “+” icon in top-right corner
- Select Type (SOCKS5, HTTP, Shadowsocks, V2Ray, etc.)
- Enter server details:
- Host: Proxy server IP or domain
- Port: Server port number
- Username/Password: If authentication required
- Configure protocol-specific settings (encryption method for Shadowsocks, UUID for V2Ray, etc.)
- Tap Done to save
Subscription Import (Recommended for enterprise services):
- Obtain subscription URL from proxy provider (e.g., IPFLY dashboard)
- In S-rocket , tap “Subscribe” or import from clipboard
- Configuration auto-populates with all available servers
Step 3: Rule Configuration
S-rocket power lies in intelligent routing rules. Sample configuration structure:
plain
[General]
bypass-system = true
skip-proxy = 192.168.0.0/16, 10.0.0.0/8, localhost
[Rule]
DOMAIN-SUFFIX,netflix.com,PROXY
DOMAIN-SUFFIX,google.com,DIRECT
GEOIP,CN,DIRECT
FINAL,PROXY
Rule Types:
- DOMAIN: Exact domain match
- DOMAIN-SUFFIX: Match domain and all subdomains
- DOMAIN-KEYWORD: Partial domain string match
- IP-CIDR: IP range matching
- GEOIP: Country/region based routing
- FINAL: Default rule for unmatched traffic
Step 4: Activation and Testing
- Select Server: Tap desired proxy from server list
- Enable Connection: Toggle main switch; confirm proxy profile installation
- Verify Operation: Check IP address via Safari at whatismyipaddress.com or ipleak.net
- Test Apps: Verify target applications route correctly
S-rocket Use Cases and Practical Applications
- Privacy Protection and Security
Challenge: Protect data on untrusted public Wi-Fi networks; prevent ISP tracking; block invasive advertisements.
S-rocket Solution:
- Route all traffic through encrypted proxy (Shadowsocks/V2Ray)
- Enable DNS over HTTPS to prevent DNS leaks
- Block ads and trackers via domain rules
- Monitor traffic for unusual patterns
- Geographic Content Access
Challenge: Access region-restricted content, verify global service availability, test localized experiences.
S-rocket Solution:
- Configure multiple proxy profiles for different countries
- Create rules routing specific streaming services through appropriate regions
- Test applications from diverse geographic perspectives
- Enterprise Mobile Operations
Challenge: Secure remote work, competitive intelligence, market research, ad verification from mobile devices.
S-rocket + IPFLY Solution:
- Enterprise-grade residential proxy infrastructure
- Rule-based routing for work apps only (preserving personal traffic)
- Static residential IPs for persistent corporate identity
- 99.9% uptime SLA ensuring business continuity
- Development and Testing
Challenge: Test app behavior across different network conditions, geographic locations, and IP reputations.
S-rocket Solution:
- Rapid switching between proxy configurations
- Simulate diverse network environments
- Test geo-fencing and regional restrictions
- Monitor performance metrics in real-time
IPFLY Integration: Enterprise Proxy Infrastructure for S-rocket
Why IPFLY Is Optimal for S-rocket
While S-rocket works with any proxy server, IPFLY provides the enterprise-grade infrastructure that transforms mobile proxy usage from consumer experimentation to professional operations:
| Dimension | Free/Public Proxies | IPFLY Enterprise |
| IP Quality | Overused, frequently blocked | 90+ million screened, high-reputation residential |
| Success Rate | Unpredictable (<50% on protected sites) | 95-99% on sophisticated platforms |
| Geographic Precision | Limited, often mislocated | 190+ countries, city-level targeting |
| Reliability | Frequent disconnections | 99.9% uptime SLA |
| Speed | Overloaded, slow | Optimized routing, minimal latency |
| Support | None | 24/7 technical support |
| Protocols | Limited, often HTTP only | Full Shadowsocks, V2Ray, SOCKS5, HTTP/HTTPS support |
IPFLY S-rocket Configuration
Step 1: Obtain IPFLY Credentials
From IPFLY dashboard:
- Select protocol (Shadowsocks, V2Ray, SOCKS5 recommended for S-rocket )
- Choose proxy type (static residential, dynamic residential, datacenter)
- Specify geographic targeting
- Retrieve server credentials (host, port, password, encryption method)
Step 2: Configure S-rocket
For Shadowsocks (recommended):
plain
Type: Shadowsocks
Host: [IPFLY server IP]
Port: [IPFLY port]
Password: [IPFLY password]
Encryption: aes-256-gcm (or as specified)
For SOCKS5:
plain
Type: SOCKS5
Host: [IPFLY server IP]
Port: [IPFLY port]
Username: [IPFLY username]
Password: [IPFLY password]
Step 3: Optimize Rules for Enterprise Use
plain
[General]
dns-server = 8.8.8.8, 1.1.1.1
fallback-dns-server = 8.8.4.4
[Rule]
# Work apps through IPFLY proxy
DOMAIN-SUFFIX,company.com,PROXY
DOMAIN-SUFFIX,salesforce.com,PROXY
DOMAIN-SUFFIX,slack.com,PROXY
# Banking and sensitive apps direct
DOMAIN-SUFFIX,bank.com,DIRECT
DOMAIN-SUFFIX,paypal.com,DIRECT
# Streaming optimization
DOMAIN-SUFFIX,netflix.com,PROXY
DOMAIN-SUFFIX,youtube.com,PROXY
# Default route
FINAL,PROXY
Advanced IPFLY + S-rocket Scenarios
Multi-Region Market Research: Create separate S-rocket configurations for each target market (US, UK, APAC) using IPFLY’s geographic distribution, enabling rapid market switching.
Persistent Corporate Identity: Assign dedicated IPFLY static residential IPs to executive devices, maintaining consistent business identity for critical communications and platform access.
High-Scale Data Collection: Utilize IPFLY’s unlimited concurrency and rotating residential pool for mobile market research, competitive intelligence, and price monitoring operations.
S-rocket vs. Alternatives: Comparative Analysis
S-rocket vs. Quantumult X
The two dominant iOS proxy clients serve different user profiles :
| Feature | S-rocket | Quantumult X |
| Price | $2.99 one-time | $7.99 one-time |
| Interface | Clean, minimalist, intuitive | Feature-rich, detailed, complex |
| Learning Curve | Easy to moderate | Moderate to steep |
| Rule System | Comprehensive, YAML-based | Advanced, with JavaScript scripting |
| Customization | Extensive for most users | Extreme for power users |
| Resource Usage | Lower (15-25 MB) | Higher (25-40 MB) |
| Best For | General users, professionals seeking efficiency | Power users, developers, advanced networking |
Choose S-rocket If: You want reliable, efficient proxy management without overwhelming complexity. The $2.99 price and intuitive interface make it ideal for most users.
Choose Quantumult X If: You need JavaScript scripting, extreme customization, or professional-grade traffic analysis. The higher price reflects advanced capabilities most users won’t need.
S-rocket vs. Proxy Apps
| Aspect | S-rocket | Express proxy/Nord proxy |
| Control | Granular, rule-based routing | Binary on/off |
| Server Choice | Any proxy server worldwide | Locked to provider network |
| Encryption | Protocol-dependent (user configurable) | Mandatory, provider-controlled |
| Speed | Faster (no unnecessary encryption) | Slower (encryption overhead) |
| Ad Blocking | Built-in | Rarely included |
| Price Model | One-time app + proxy costs | Monthly subscription |
| Best For | Power users, specific routing needs | Simple privacy, casual users |
Best Practices for S-rocket Deployment
Security Recommendations
Use Trusted Proxy Providers Only: Free or unknown proxy servers may intercept traffic, log data, or inject advertisements. Use reputable providers like IPFLY with clear privacy policies and enterprise credentials.
Enable DNS Over HTTPS: Prevent DNS leaks that could expose browsing history and real location. Configure DoH in S-rocket settings with trusted resolvers (Cloudflare, Google, Quad9).
Regular Updates: Keep S-rocket updated via App Store to receive security patches and feature improvements.
HTTPS Decryption Caution: While powerful for inspection, HTTPS decryption creates security risks if device is compromised. Use only when necessary and on trusted devices.
Performance Optimization
Split Tunneling: Use rules to route only necessary traffic through proxy, preserving bandwidth and battery for other operations.
Geographic Proximity: Select proxy servers geographically close to your location to minimize latency, unless specific region targeting is required.
Protocol Selection:
- Shadowsocks/V2Ray: Best balance of speed and security for most users
- WireGuard: Maximum speed when encryption is priority
- SOCKS5: Maximum compatibility, minimal overhead
Subscription Auto-Update: Enable automatic subscription updates to ensure server lists remain current as IPFLY rotates and optimizes infrastructure.
Troubleshooting Common S-rocket Issues
Connection Failures
Symptom: S-rocket shows connected but apps don’t work, or connection fails immediately.
Solutions:
- Verify proxy credentials match exactly (check for extra spaces)
- Confirm server is online via IPFLY dashboard or alternative connection
- Check firewall settings on proxy server
- Try alternative protocol (Shadowsocks vs. SOCKS5)
DNS Leaks
Symptom: Websites show real location despite proxy connection.
Solution: Enable DNS over HTTPS in S-rocket settings and specify reliable DNS servers (8.8.8.8, 1.1.1.1).
Slow Performance
Symptom: Apps load slowly or timeout when proxy is active.
Solutions:
- Switch to closer geographic server
- Try alternative protocol (WireGuard for speed, Shadowsocks for balance)
- Disable HTTPS decryption if enabled (reduces overhead)
- Check proxy server load and switch to less congested option
Rule Conflicts
Symptom: Unexpected traffic routing, apps bypassing proxy or being blocked unintentionally.
Solution: Review rule order (S-rocket processes rules top-to-bottom), check for overlapping domain matches, and use “FINAL” rule as catch-all.
Frequently Asked Questions About S-rocket
Is S-rocket a proxy ?
No. S-rocket is a proxy client, not a proxy. While it uses iOS’s proxy API to capture traffic, it routes through proxy servers rather than creating encrypted tunnels. The distinction matters: proxies provide comprehensive encryption and privacy; S-rocket provides granular control and flexibility. For maximum security, combine S-rocket with encrypted proxy protocols (Shadowsocks, V2Ray).
Is S-rocket available for Android?
Officially, no—S-rocket is iOS-only. However, unofficial Android versions exist with similar functionality but from different developers. For Android, alternatives like Postern, SocksDroid, or V2RayNG provide comparable capabilities.
Is S-rocket free?
No. S-rocket costs $2.99 as a one-time App Store purchase. There are no subscription fees for the app itself, but you need separate proxy server access (free or paid). For professional use, IPFLY’s enterprise proxy service provides the infrastructure that transforms S-rocket into a business tool.
Can I use S-rocket with any proxy provider?
Yes. S-rocket supports standard protocols (Shadowsocks, V2Ray, SOCKS5, HTTP) used by virtually all proxy providers. IPFLY is recommended for enterprise use due to scale, reliability, and support, but the app works with any compatible service.
Does S-rocket encrypt my traffic?
Encryption depends on the proxy protocol you configure:
- Shadowsocks/V2Ray/Trojan: Yes, strong encryption
- SOCKS5: No encryption (unless using SOCKS5 over TLS)
- HTTP: No encryption
- HTTPS: Transport-layer encryption to websites
For sensitive data, use Shadowsocks or V2Ray protocols, or ensure destination websites use HTTPS.
Why choose S-rocket over a proxy app?
Choose S-rocket when you need:
- Specific app/domain routing rather than system-wide tunneling
- Maximum speed without unnecessary encryption
- Integration with personal or enterprise proxy infrastructure
- Built-in ad blocking and traffic filtering
- Lower total cost (one-time app purchase vs. monthly proxy subscription)
- Professional proxy management capabilities
S-rocket as Professional iOS Infrastructure
S-rocket represents a paradigm shift in mobile network management—from consumer proxy subscriptions to professional proxy control. At $2.99, it delivers capabilities that would cost hundreds of dollars in enterprise networking equipment, all within an interface that balances power with accessibility.
The true potential of S-rocket emerges when paired with quality proxy infrastructure. IPFLY transforms this iOS app from a privacy tool into a business platform—enabling mobile market research, competitive intelligence, secure remote operations, and global content management with 90+ million residential IPs, 99.9% uptime, and unlimited scale.
For iOS users seeking granular control, professional capabilities, and the flexibility to choose their network path, S-rocket + IPFLY offers a compelling alternative to one-size-fits-all proxy solutions. In an era of increasing digital complexity, this combination puts sophisticated network control directly in users’ hands—where it belongs.
IPFLY delivers enterprise proxy solutions featuring static residential, dynamic residential, and datacenter proxy options with full Shadowsocks, V2Ray, and SOCKS5 protocol support. With a global pool exceeding 90 million IPs across 190+ countries, IPFLY provides the high-reputation, geographically diverse proxy infrastructure that transforms S-rocket from a consumer app into a professional mobile operations platform. The service offers 99.9% uptime, unlimited concurrency, 24/7 technical support, and seamless integration with iOS proxy clients including S-rocket .