GlossaryProtocolsAdvanced

Shadowsocks

Shadowsocks is an open-source encrypted proxy designed to bypass internet censorship. It disguises traffic to slip past firewalls that block traditional VPNs.

Last updated June 8, 2026

Definition

Shadowsocks is an open-source, encrypted proxy protocol originally created to circumvent the Great Firewall of China. Unlike a full VPN, it is a lightweight SOCKS5-based proxy built specifically to evade censorship and deep packet inspection (DPI).

How Shadowsocks works

A Shadowsocks client encrypts your traffic and forwards it to a Shadowsocks server, which then relays it to the destination. Crucially, the encrypted stream is designed to look like ordinary internet traffic rather than a recognizable VPN protocol, so censorship systems struggle to identify and block it. It only proxies the traffic you direct to it, making it efficient and selective.

Why it matters

For users behind aggressive firewalls, Shadowsocks restores access to blocked sites while being harder to detect than standard VPNs. It is fast, low-overhead, and runs on most platforms.

  • Censorship-resistant: mimics normal traffic.
  • Lightweight: a proxy, not a full system VPN.
  • Trade-off: not a privacy-first tool by default; it prioritizes evasion over full anonymity.

Shadowsocks remains a go-to anti-censorship tool, often used as a pluggable transport for other tools.

Examples

1

Users in China running Shadowsocks to access blocked sites

2

A self-hosted Shadowsocks server on a cloud VPS for censorship evasion

3

Outline VPN, which is built on the Shadowsocks protocol

Common Use Cases

Bypassing national firewalls and internet censorship
Evading deep packet inspection that blocks standard VPNs
Selectively proxying specific apps or browser traffic
Running a lightweight, self-hosted circumvention proxy

Frequently Asked Questions

No, Shadowsocks is an encrypted SOCKS5 proxy, not a full VPN. It proxies selected traffic to evade censorship rather than encrypting your entire system connection.
It encrypts traffic and resists detection, but it is built for censorship evasion rather than anonymity. For strong privacy, pair it with other tools.
Its encrypted traffic is designed to look like ordinary internet activity, so deep packet inspection systems cannot easily fingerprint it as a proxy or VPN.

Keep Learning

All terms

SOCKS5

SOCKS5 is the latest version of the SOCKS proxy protocol. It routes any kind of network traffic — TCP and UDP — between a client and a server through a proxy, with optional authentication and no awareness of the underlying application.

Read definition

VPN

A VPN (Virtual Private Network) encrypts all of your device's internet traffic and routes it through a remote server, hiding your IP and protecting data on untrusted networks.

Read definition

Forward Proxy

A forward proxy sits between clients and the internet, forwarding their outbound requests so the destination sees the proxy's IP instead of the client's.

Read definition

SSL/TLS

SSL/TLS is the encryption protocol that secures data in transit on the web — the 'S' in HTTPS — protecting it from eavesdropping and tampering.

Read definition
Back to Glossary