Remote work calls depend on more than whether the VPN indicator is visible. A stable Wi-Fi or cellular connection, a reachable server, suitable UDP handling, and rules that route work traffic as intended all matter. Shadowrocket can route traffic according to your active configuration, but it cannot remove congestion or override company network policies.

This guide is for iPhone and iPad users who already have their own subscription and need to troubleshoot Zoom, Teams, or work resources. Make one change at a time, test with a short call, and compare the result on the network you actually use for work.

At a glance

Start by checking the active server and Global Routing mode, then confirm whether your existing service supports UDP and whether work traffic is routed as intended. Test on Wi-Fi and cellular separately, keep company security requirements in place, and use a short call to compare results. A better configuration can help identify a routing problem, but call quality still depends on your local network, service, server, and workplace policies.

1. Check the call path before changing settings

A video call involves several parts of the network path: the app on your device, iOS networking, the current Wi-Fi or cellular connection, Shadowrocket’s routing decision, the selected server when traffic uses a proxy, and the meeting service. A delay or interruption can come from any of these points. Changing rules before identifying which path is in use can make diagnosis harder.

Zoom or Teams iOS network Shadowrocket route Wi-Fi or cellular Meeting service

On Home, check that Shadowrocket is connected and review Global Routing. If you intend to use the active configuration’s rules, select Config and confirm that the intended Config is active. Proxy and Direct are different routing modes: they route traffic globally rather than testing a particular rule in the active Config. If your routing mode or active configuration is not what you expect, correct that before interpreting a call test.

2. Choose a server by stability, not by name alone

When a call is unreliable, compare only servers already available through your own subscription. A server label or claimed location cannot establish its current latency, congestion, or suitability for real-time audio and video. The path from your current network to the server, the server’s load, and the route onward to the meeting service all affect the result.

3 factors
Local link, server path, and route to the meeting service
2 networks
Test Wi-Fi and cellular separately where available
1 change
Change one variable per comparison

In Home, select an available server from your existing list and make a short call before deciding whether it helped. Keep the device in the same location and, as far as practical, use the same meeting, time of day, and call settings. If the app displays connection or latency information, treat it as a clue rather than a guarantee: a quick connection check does not reproduce the sustained two-way traffic of a video call.

Compare the network path before keeping a change

On Wi-Fi
  • Test near the access point first.
  • Check whether other devices are uploading or streaming.
  • Repeat from your usual work location.
On cellular
  • Test where the signal is normally reliable.
  • Check whether the device is switching networks.
  • Compare the same server and call conditions.

Keep the route that meets your work requirements consistently; a single good call is not enough to establish a reliable pattern.

If all available servers perform poorly on one Wi-Fi network but calls improve on cellular, investigate that Wi-Fi connection before editing several rules. If a single existing server consistently performs worse on both networks, compare another server in your list. Where the results change by time of day, congestion or the wider network path may be involved. These comparisons identify patterns; they do not guarantee a specific cause.

3. Verify UDP support for real-time calls

Real-time audio and video services may use UDP for some media traffic, while other parts of a session can use different transport methods. The exact connections can vary with the app, operating system, meeting features, and network conditions. A successful web sign-in or an established VPN tunnel does not prove that UDP media traffic is passing correctly through the selected route.

First check the documentation for your own service and subscription to determine whether the selected server and connection method support UDP. Do not assume that a server supports it because ordinary web pages load. If that information is unavailable, ask your provider using only the details needed to identify the server type; do not share company credentials, meeting links, or sensitive logs.

UDP check

Confirm
Whether the selected server supports UDP
Compare
Same server on Wi-Fi and cellular
Observe
Audio gaps, frozen video, or reconnects

A connected tunnel alone is not a UDP media test.

Route check

Mode
Home → Global Routing
Rules
Config, if testing configuration rules
Evidence
Relevant connection records, if available

Check the current route before changing a rule.

During a short call, note whether the problem affects both audio and video or only one. If voice is clear but video freezes, that points to a different symptom than repeated disconnections, although it does not identify the cause by itself. If the call works with Shadowrocket disconnected but fails when it is connected, stop and compare the active route and server rather than adding broad exceptions immediately. Make any comparison only if your company permits it.

4. Review work traffic rules carefully

When Global Routing is set to Config, traffic is evaluated according to the active configuration and its rules. Rule order matters: a broader earlier match can determine the route before a later, more specific entry is reached. Before adding anything, confirm the active Config and review whether an existing rule already matches the work destination.

Zoom, Teams, and other work services may use multiple domains and dynamically selected endpoints. A single hostname rule may not cover all sign-in, messaging, meeting, media, and content-delivery traffic. Conversely, routing a broad domain suffix can affect unrelated services. Avoid copying unverified domain lists or making a broad PROXY or DIRECT rule based on one failed call.

  1. Confirm routing mode

    Open Home → Global Routing. Select Config only when you intend to test the active configuration’s rules, and confirm the intended Config is selected.

  2. Find the request

    Reproduce one call issue and review the relevant connection records if available. Identify the destination and the policy shown; conceal account identifiers and sensitive hostnames when taking notes.

  3. Check earlier rules

    In Config, inspect rules above the matching entry. Look for a broader DOMAIN-SUFFIX or other rule that may take effect first. Do not assume a later rule overrides an earlier match.

  4. Test one change

    If the destination and intended policy are clear, make one narrow change consistent with your company’s requirements. Save the Config, start a new call, and check whether the same symptom changes.

  5. Restore if needed

    If the result is worse or unclear, restore your prior rule or Config copy. Keep a note of the original state so that the comparison is reversible.

For a test rule, use the exact destination and policy confirmed from your own configuration or workplace guidance. Do not use illustrative example domains as live Zoom or Teams endpoints. A rule that routes sign-in successfully does not necessarily route media correctly, and a call may continue using an existing connection after a configuration change. Start a fresh test session before drawing a conclusion.

5. Improve the local network before adding exceptions

When a call stutters, the local wireless link can be the limiting part even when Shadowrocket is configured correctly. On Wi-Fi, move closer to the access point, reduce competing uploads, and check whether the connection drops when moving between rooms. On cellular, compare at a location with a stable signal and note whether the device switches between cellular and Wi-Fi during the call. Network changes can interrupt active sessions even if the VPN reconnects afterward.

Zoom works, but Teams keeps reconnecting. Is the server necessarily at fault?

No. The apps may use different destinations or session paths, and workplace policies can differ by service. Check the affected app’s connection records and your organization’s guidance before changing a shared rule.

The VPN is connected. Does that mean UDP is working?

No. The tunnel status confirms that a VPN connection is established, not that the selected server supports every UDP flow. Verify support with your own service information and compare a real test call.

Should I switch to Direct for every meeting?

Only if that is permitted by your workplace and appropriate for the destination. Direct changes the route; it is not a universal performance fix and may conflict with company security requirements.

6. Keep a setup you can verify and reverse

Once a call is stable, record the practical settings that produced the result: network type, selected server, Global Routing mode, active Config, and whether the test was a Zoom or Teams call. This is more useful than remembering only that “the VPN worked.” If a later update or network change causes problems, you can repeat the same comparison rather than rebuilding your setup from memory.

Takeaway: identify the failing part before changing the route

If calls fail only on one network, investigate that network first. If the problem follows one server across networks, compare another server already in your subscription. If only a specific work app is affected, check its destination and workplace policy before editing shared rules.

Keep a reversible copy of any Config you edit, and avoid stacking multiple unverified exceptions. A narrow change with a repeatable test makes it easier to tell whether the result improved, stayed the same, or became less reliable. If the issue affects several users, persists across networks, or involves managed company access, provide your IT administrator with a concise description of the network, time, app, and symptom rather than exposing private meeting data.

Shadowrocket provides routing controls; it does not guarantee lower latency, uninterrupted calls, or access to every workplace service. The appropriate setup is the one that meets your organization’s security requirements and behaves consistently on the Wi-Fi or cellular connection you actually use.