Remote work calls depend on more than whether the VPN indicator is visible. A stable Wi-Fi or cellular connection, a reachable server, suitable UDP handling, and rules that route work traffic as intended all matter. Shadowrocket can route traffic according to your active configuration, but it cannot remove congestion or override company network policies.
This guide is for iPhone and iPad users who already have their own subscription and need to troubleshoot Zoom, Teams, or work resources. Make one change at a time, test with a short call, and compare the result on the network you actually use for work.
Start by checking the active server and Global Routing mode, then confirm whether your existing service supports UDP and whether work traffic is routed as intended. Test on Wi-Fi and cellular separately, keep company security requirements in place, and use a short call to compare results. A better configuration can help identify a routing problem, but call quality still depends on your local network, service, server, and workplace policies.
1. Check the call path before changing settings
A video call involves several parts of the network path: the app on your device, iOS networking, the current Wi-Fi or cellular connection, Shadowrocket’s routing decision, the selected server when traffic uses a proxy, and the meeting service. A delay or interruption can come from any of these points. Changing rules before identifying which path is in use can make diagnosis harder.
On Home, check that Shadowrocket is connected and review Global Routing. If you intend to use the active configuration’s rules, select Config and confirm that the intended Config is active. Proxy and Direct are different routing modes: they route traffic globally rather than testing a particular rule in the active Config. If your routing mode or active configuration is not what you expect, correct that before interpreting a call test.
- Note the starting conditions: Write down whether you are using Wi-Fi or cellular, which server is selected, the Global Routing mode, and whether the call is audio-only or video.
- Check the connection status: A connected tunnel does not prove that every destination is reachable or that a call is using the route you intended.
- Use a repeatable test: Join the same meeting or a test call for a few minutes, then compare one setting at a time. Avoid changing the server, rules, and network simultaneously.
- Check the work app’s own indicators: Look for warnings about network quality, microphone or camera access, or reconnecting. These can help distinguish a network issue from a device permission issue.
2. Choose a server by stability, not by name alone
When a call is unreliable, compare only servers already available through your own subscription. A server label or claimed location cannot establish its current latency, congestion, or suitability for real-time audio and video. The path from your current network to the server, the server’s load, and the route onward to the meeting service all affect the result.
In Home, select an available server from your existing list and make a short call before deciding whether it helped. Keep the device in the same location and, as far as practical, use the same meeting, time of day, and call settings. If the app displays connection or latency information, treat it as a clue rather than a guarantee: a quick connection check does not reproduce the sustained two-way traffic of a video call.
Compare the network path before keeping a change
On Wi-Fi
- Test near the access point first.
- Check whether other devices are uploading or streaming.
- Repeat from your usual work location.
On cellular
- Test where the signal is normally reliable.
- Check whether the device is switching networks.
- Compare the same server and call conditions.
Keep the route that meets your work requirements consistently; a single good call is not enough to establish a reliable pattern.
If all available servers perform poorly on one Wi-Fi network but calls improve on cellular, investigate that Wi-Fi connection before editing several rules. If a single existing server consistently performs worse on both networks, compare another server in your list. Where the results change by time of day, congestion or the wider network path may be involved. These comparisons identify patterns; they do not guarantee a specific cause.
3. Verify UDP support for real-time calls
Real-time audio and video services may use UDP for some media traffic, while other parts of a session can use different transport methods. The exact connections can vary with the app, operating system, meeting features, and network conditions. A successful web sign-in or an established VPN tunnel does not prove that UDP media traffic is passing correctly through the selected route.
First check the documentation for your own service and subscription to determine whether the selected server and connection method support UDP. Do not assume that a server supports it because ordinary web pages load. If that information is unavailable, ask your provider using only the details needed to identify the server type; do not share company credentials, meeting links, or sensitive logs.
UDP check
- Confirm
- Whether the selected server supports UDP
- Compare
- Same server on Wi-Fi and cellular
- Observe
- Audio gaps, frozen video, or reconnects
A connected tunnel alone is not a UDP media test.
Route check
- Mode
- Home → Global Routing
- Rules
- Config, if testing configuration rules
- Evidence
- Relevant connection records, if available
Check the current route before changing a rule.
During a short call, note whether the problem affects both audio and video or only one. If voice is clear but video freezes, that points to a different symptom than repeated disconnections, although it does not identify the cause by itself. If the call works with Shadowrocket disconnected but fails when it is connected, stop and compare the active route and server rather than adding broad exceptions immediately. Make any comparison only if your company permits it.
4. Review work traffic rules carefully
When Global Routing is set to Config, traffic is evaluated according to the active configuration and its rules. Rule order matters: a broader earlier match can determine the route before a later, more specific entry is reached. Before adding anything, confirm the active Config and review whether an existing rule already matches the work destination.
Zoom, Teams, and other work services may use multiple domains and dynamically selected endpoints. A single hostname rule may not cover all sign-in, messaging, meeting, media, and content-delivery traffic. Conversely, routing a broad domain suffix can affect unrelated services. Avoid copying unverified domain lists or making a broad PROXY or DIRECT rule based on one failed call.
-
Confirm routing mode
Open Home → Global Routing. Select Config only when you intend to test the active configuration’s rules, and confirm the intended Config is selected.
-
Find the request
Reproduce one call issue and review the relevant connection records if available. Identify the destination and the policy shown; conceal account identifiers and sensitive hostnames when taking notes.
-
Check earlier rules
In Config, inspect rules above the matching entry. Look for a broader DOMAIN-SUFFIX or other rule that may take effect first. Do not assume a later rule overrides an earlier match.
-
Test one change
If the destination and intended policy are clear, make one narrow change consistent with your company’s requirements. Save the Config, start a new call, and check whether the same symptom changes.
-
Restore if needed
If the result is worse or unclear, restore your prior rule or Config copy. Keep a note of the original state so that the comparison is reversible.
For a test rule, use the exact destination and policy confirmed from your own configuration or workplace guidance. Do not use illustrative example domains as live Zoom or Teams endpoints. A rule that routes sign-in successfully does not necessarily route media correctly, and a call may continue using an existing connection after a configuration change. Start a fresh test session before drawing a conclusion.
5. Improve the local network before adding exceptions
When a call stutters, the local wireless link can be the limiting part even when Shadowrocket is configured correctly. On Wi-Fi, move closer to the access point, reduce competing uploads, and check whether the connection drops when moving between rooms. On cellular, compare at a location with a stable signal and note whether the device switches between cellular and Wi-Fi during the call. Network changes can interrupt active sessions even if the VPN reconnects afterward.
- Reduce competing traffic: Pause large uploads, cloud backups, or other high-bandwidth activity during a controlled test, if you are allowed to do so.
- Separate network tests: Test Wi-Fi and cellular independently rather than switching networks halfway through a comparison.
- Keep call conditions consistent: Compare the same audio/video settings and similar meeting conditions. A camera-off call is not a direct comparison with a high-resolution video call.
- Check device basics: Confirm that Zoom or Teams has the required microphone and camera permissions, and that no other app is monopolizing the connection or audio input.
Zoom works, but Teams keeps reconnecting. Is the server necessarily at fault?
No. The apps may use different destinations or session paths, and workplace policies can differ by service. Check the affected app’s connection records and your organization’s guidance before changing a shared rule.
The VPN is connected. Does that mean UDP is working?
No. The tunnel status confirms that a VPN connection is established, not that the selected server supports every UDP flow. Verify support with your own service information and compare a real test call.
Should I switch to Direct for every meeting?
Only if that is permitted by your workplace and appropriate for the destination. Direct changes the route; it is not a universal performance fix and may conflict with company security requirements.
6. Keep a setup you can verify and reverse
Once a call is stable, record the practical settings that produced the result: network type, selected server, Global Routing mode, active Config, and whether the test was a Zoom or Teams call. This is more useful than remembering only that “the VPN worked.” If a later update or network change causes problems, you can repeat the same comparison rather than rebuilding your setup from memory.
Takeaway: identify the failing part before changing the route
If calls fail only on one network, investigate that network first. If the problem follows one server across networks, compare another server already in your subscription. If only a specific work app is affected, check its destination and workplace policy before editing shared rules.
Keep a reversible copy of any Config you edit, and avoid stacking multiple unverified exceptions. A narrow change with a repeatable test makes it easier to tell whether the result improved, stayed the same, or became less reliable. If the issue affects several users, persists across networks, or involves managed company access, provide your IT administrator with a concise description of the network, time, app, and symptom rather than exposing private meeting data.
Shadowrocket provides routing controls; it does not guarantee lower latency, uninterrupted calls, or access to every workplace service. The appropriate setup is the one that meets your organization’s security requirements and behaves consistently on the Wi-Fi or cellular connection you actually use.