# Shadowrocket Correct Setup - Working with Tailscale

## Understanding Shadowrocket Architecture

Shadowrocket works as a **local proxy server** on your iPhone:
- Apps connect to Shadowrocket's local proxy (127.0.0.1:80)
- Shadowrocket forwards traffic to your configured server (server2)
- This way it doesn't need VPN mode!

## Step-by-Step Setup

### Step 1: Add Server2 as a Server (NOT in Proxy Settings)

1. Open Shadowrocket app
2. Go to the **"Home"** tab (house icon at bottom)
3. Tap the **"+"** button in the top right corner
4. Select **"HTTP"** or **"HTTPS"**
5. Fill in:
   - **Remark:** `server2-proxy`
   - **Address:** `100.70.115.1` (your Tailscale IP)
   - **Port:** `7890` (HTTP) or `7892` (Mixed)
   - **Username:** (leave empty)
   - **Password:** (leave empty)
6. Tap **"Done"**

### Step 2: Enable the Server

1. Go back to **"Home"** tab
2. You should see `server2-proxy` in the server list
3. Tap on it to select it
4. Toggle the switch at the top to **ON**

### Step 3: Configure Proxy Settings (What You Saw)

The "Proxy Settings" you saw (127.0.0.1:80) is Shadowrocket's **local proxy** that apps connect to. You can configure it:

1. Go to **"Settings"** tab (gear icon)
2. Tap **"Proxy"**
3. In **"Proxy Settings"** section:
   - **Proxy Type:** HTTP (or leave as is)
   - **Proxy Port:** `80` (or any port, this is local)
   - **Proxy Address:** `127.0.0.1` (localhost - this is correct)

**Important:** These settings are for Shadowrocket's LOCAL proxy. Your apps will connect to this, and Shadowrocket will forward to server2.

### Step 4: Configure Apps to Use Shadowrocket's Local Proxy

Now you need to tell your apps to use Shadowrocket's local proxy:

**Option A: System-Wide (Limited)**
1. Settings → Wi-Fi
2. Tap ⓘ next to your Wi-Fi
3. Scroll to **HTTP Proxy**
4. Select **Manual**
5. Enter:
   - **Server:** `127.0.0.1` (or `localhost`)
   - **Port:** `80` (or whatever you set in Proxy Settings)
6. Save

**Option B: Use Shadowrocket's VPN Mode (But Configured Correctly)**

Actually, Shadowrocket's "VPN mode" is how it intercepts traffic. Here's the trick:

1. In Shadowrocket **"Home"** tab
2. Make sure your `server2-proxy` is selected
3. Toggle the switch ON
4. **This will create a VPN connection** BUT it's Shadowrocket's VPN, not a conflict
5. Shadowrocket's VPN intercepts traffic and routes it through server2

**The key:** Shadowrocket's VPN mode is fine - it's a different VPN than Tailscale. However, iOS only allows ONE VPN at a time, so:

### Solution: Use Shadowrocket's VPN Mode (Disable Tailscale VPN)

Since iOS only allows one VPN:
1. **Disable Tailscale's VPN mode** (but keep Tailscale app running for network access)
2. **Enable Shadowrocket's VPN mode**
3. Shadowrocket will route through Tailscale's network to reach server2

Wait - that won't work because Tailscale needs VPN mode to provide network access...

### Better Solution: Use Proxy Chain Feature

Looking at your screenshot, I see **"Proxy Chain"** option! This might be the solution:

1. Go to **Settings** → **Proxy Chain**
2. Enable **"Enable Chain"** toggle
3. Configure:
   - **Type:** HTTP
   - **Address:** `100.70.115.1`
   - **Port:** `7890`
4. This might allow Shadowrocket to use Tailscale's network without VPN conflict

## Recommended Approach

Based on your screenshots, here's what to do:

### Method 1: Use Proxy Chain (Try This First)

1. **Keep Tailscale VPN ON**
2. In Shadowrocket:
   - Go to **Settings** → **Proxy Chain**
   - Enable **"Enable Chain"**
   - Set Type: HTTP, Address: `100.70.115.1`, Port: `7890`
3. In Shadowrocket **Home** tab:
   - Add a "Direct" or "Reject" server (or use existing)
   - Enable Shadowrocket
4. Configure apps to use Shadowrocket's local proxy (127.0.0.1:80)

### Method 2: Use Shadowrocket VPN Mode (Disable Tailscale)

1. **Disable Tailscale VPN** (but app can stay installed)
2. In Shadowrocket **Home** tab:
   - Add server2: `100.70.115.1:7890`
   - Enable Shadowrocket VPN mode
3. Shadowrocket will handle routing

**Problem:** You'll lose direct Tailscale network access, but proxy will work.

### Method 3: Use System Proxy Settings

1. Keep Tailscale ON
2. Don't use Shadowrocket VPN mode
3. Configure system proxy:
   - Settings → Wi-Fi → ⓘ → HTTP Proxy → Manual
   - Server: `100.70.115.1`
   - Port: `7890`
4. This works for some apps but not all

## Testing

After setup:
1. Open Safari
2. Visit: https://api.ipify.org
3. Should show: `158.101.140.85` (server2's IP)

## Which Method Should You Use?

**Try Proxy Chain first** - it might allow both Tailscale and Shadowrocket to work together!

If that doesn't work, you'll need to choose:
- **Tailscale VPN** = Direct network access, but no proxy
- **Shadowrocket VPN** = Proxy works, but no direct Tailscale network

Let me know which method works for you!