What is the difference between V2Ray and an airport plan?

V2Ray is a proxy framework (software). An airport plan is a subscription service that runs on V2Ray (or similar frameworks) and provides you with ready-made server configurations. You do not need to understand V2Ray protocol internals — you just paste the subscription URL and use the client app.

Can I share the subscription with family members?

Most plans allow 3-5 simultaneous connections. All connections come out of the same traffic pool. Sharing with family is fine within the device limit.

What if my subscription URL gets blocked by the GFW?

We provide a backup URL on a different domain. If both are blocked, contact us for a manual config file. We also push new subscription URLs when domains are blocked.

Is this legal in China?

The legal situation is the same as for VPNs: personal use by individuals is technically unauthorized under Chinese regulations, but enforcement against individual users is extremely rare. Airport plan operators inside China take on significant legal risk; individual users do not. Assess your own circumstances.

Which protocol is best for China right now?

As of mid-2026: VLESS+Reality and Hysteria2 have the best GFW pass rates. Shadowsocks basic is increasingly inconsistent. VMess-WS+TLS still works on most nodes. Airport plan operators update their configurations regularly; your best strategy is keeping the subscription refreshed.

What is Clash and why do people recommend it?

Clash is a rule-based proxy client. It can route different domains or apps through different exit nodes or no proxy at all — a feature called "分流" (traffic splitting). For example: Google goes through the proxy, Taobao goes direct. This reduces proxy bandwidth use and makes browsing feel faster. Clash Verge Rev is the current maintained fork for Mac and Windows.

V2Ray & Shadowrocket Airport Plan Setup Guide

What Airport Plans Are and Why They Exist

Commercial VPNs like NordVPN and ExpressVPN were built for general privacy and unblocking. They were not built specifically to defeat China's Great Firewall. Airport plans were.

The term "airport" (机场) is Chinese internet slang that originated from the metaphor of nodes as "runways" — exit points that carry your traffic out of China to international destinations. An airport plan is a subscription to a managed proxy service. It is not a VPN in the traditional sense. It does not encrypt your entire device's traffic by default or provide DNS leak protection out of the box. What it does is provide a subscription URL that contains configurations for dozens of proxy nodes using protocols specifically designed to evade GFW detection: Shadowsocks, VMess, VLESS, Trojan, Hysteria2, and others.

You load that URL into a client app — Shadowrocket on iOS, V2RayNG on Android, or Clash Verge on Mac and Windows — and the app gives you a menu of nodes to connect through.

What Protocols Matter and Why

Shadowsocks: The original GFW-bypass protocol, created in 2012. Encrypts traffic using AEAD ciphers and makes it look like random data, not a VPN tunnel. Still widely used, though the GFW has become better at detecting it through traffic analysis. Basic Shadowsocks is sometimes blocked; paired with obfs4 or v2ray-plugin, it is more resilient.

VMess (V2Ray): A more complex protocol from the V2Ray project. Supports multiple transports including WebSocket over TLS (WS+TLS), which routes traffic through standard HTTPS on port 443 — difficult for the GFW to block without breaking the entire internet. Common in airport plans through 2023-2024.

VLESS + Reality: The current state-of-the-art for GFW bypass as of 2026. VLESS is a lighter, faster successor to VMess. Reality is an obfuscation layer that makes the client appear to be connecting to a real TLS-enabled website — not a proxy. It "borrows" the TLS fingerprint of a legitimate site, making deep packet inspection unable to distinguish the connection from regular HTTPS traffic to that site. Premium airport plans running VLESS+Reality are the hardest to block currently.

Hysteria2: Built on QUIC (the same transport protocol underlying HTTP/3). The GFW cannot block QUIC without also blocking a large swath of legitimate internet traffic, so Hysteria2 currently enjoys high pass rates. Best for speed — QUIC's congestion control is optimized for high-throughput links. The catch: UDP-based, so networks that block UDP or degrade it (some mobile ISPs) will fall back to a slower TCP mode.

Trojan: Wraps proxy traffic inside TLS, connecting to what appears to be a normal HTTPS server. Clean for residential ISPs that do DPI on port 443 traffic.

What We Deliver After Payment

After USDT payment confirms, your delivery email receives:

**Your primary subscription URL** — a unique HTTPS link (e.g., `https://sub.example.com/xxxxxx`). Paste this into your client app to import all configured nodes.
**A backup subscription URL** — a different domain, same nodes. Use this if the main URL becomes inaccessible.
**Platform setup guides** — specific instructions for Shadowrocket, V2RayNG, Clash Verge, Sing-box.
**Support contact** — reach us with your order ID if nodes are down.

Platform-Specific Setup

### iOS — Shadowrocket

Shadowrocket is a $2.99 app on the US Mobile App Store. If your iPhone is on a Chinese Mobile App Store account, you need a US account to download it.

Open Shadowrocket. Tap the **+** button at top right.
Choose **Type: Subscribe**.
Paste your subscription URL in the URL field.
Tap **Done**. The app downloads and imports all nodes.
In the main server list, tap a node to select it, then enable the toggle at the top.
For China users: in **Settings > Route**, set to **Config** if you have a routing rule set, or **Proxy** to route all traffic through the node.

### Android — V2RayNG

V2RayNG is free. Download from the GitHub releases page (https://GitHub.com/2dust/v2rayNG/releases) — not Android App Store, since the Play Store version may be outdated.

Open V2RayNG. Tap the **+** (top right menu), choose **Import config from clipboard (URL)**.
Paste your subscription URL.
Long-press the subscription entry that appears, select **Update subscription**.
Tap a server in the list to select it. Tap the green **V** button at the bottom right to connect.
Grant the VPN permission when Android prompts.

### iOS/Android — Sing-box (advanced)

Sing-box supports all modern protocols including Hysteria2 and VLESS+Reality. If your airport plan uses these protocols, Sing-box is the recommended client over Shadowrocket for maximum performance. Install from Mobile App Store (Sing-box is available) or sideload on Android.

### Mac/Windows — Clash Verge

Clash Verge Rev (the maintained fork) is the standard desktop client.

Download from GitHub: `GitHub.com/clash-verge-rev/clash-verge-rev`.
Install and open.
Click **Profiles** in the left sidebar.
Click the **+** button, paste your subscription URL, click **Import**.
Click the imported profile to activate it.
In **Proxies**, choose a node from the proxy group (or select **Auto** for automatic best-ping selection).
Enable **System Proxy** in the **Settings** panel. On Mac, this sets your system proxy automatically. On Windows, it configures the Windows system proxy.

### Windows — v2rayN

For users who prefer a lighter client: 1. Download v2rayN from `GitHub.com/2dust/v2rayN/releases`. 2. Extract and run `v2rayN.exe`. 3. Click the subscription menu, add subscription URL, update. 4. Select a server, press Enter to set as active. 5. Enable system proxy from the tray icon.

Pro Tips

Node selection: For the best speed, use the auto-select feature if your client supports it — it pings all nodes and connects to the lowest-latency one. Manually, pick nodes labeled HK (Hong Kong) or JP (Japan) for China users — geographic proximity reduces latency.

4K streaming: Pick a node in or near the target content region. For US Netflix, a US node. For UK BBC iPlayer, a UK node. For raw throughput, JP and SG nodes are typically the fastest from China even if the content needs to be accessed on a US IP.

Split tunneling with Clash: Clash supports rule-based routing. You can configure it to only route specific apps or domains through the proxy, letting domestic Chinese traffic go direct. This is the "分流" (split-routing) configuration. More advanced but reduces congestion and makes the connection feel more natural.

Subscription refresh: Refresh your subscription weekly (in Clash Verge: click the subscription → Update). Airport operators push node updates, new IPs, and protocol changes when old nodes get blocked. If your nodes stop working, a subscription refresh often fixes it.

TLS nodes for restricted networks: On corporate networks, school Wi-Fi, or hotel networks that block non-HTTP traffic, switch to nodes running WS+TLS or VLESS+Reality on port 443. These pass through almost all port-filtering firewalls.

Pricing Reference

Tier	Traffic	Devices	Our USDT Price
Starter	100GB/mo	3	~2 USDT/mo
Standard	200GB/mo	3	~3 USDT/mo
Premium	500GB/mo	5	~6 USDT/mo
Unlimited	Unlimited	5	~10 USDT/mo

Traffic resets monthly. Unused traffic does not roll over. Heavy users (video calls, 4K streaming) typically consume 50-150GB/month.

Risks and Limitations

No formal privacy policy: Airport plan operators — even well-regarded ones — do not publish audited privacy policies. Assume they can technically log your connection metadata. For GFW bypass to access Google, YouTube, or social media, this risk is low. For high-stakes privacy needs, combine an airport plan for GFW bypass with a separate Mullvad or ProtonVPN tunnel for the sensitive traffic.

Node churn: Airport plans are operated by small teams. Nodes go down, IPs get blocked, operators occasionally disappear. Premium-tier plans with larger operator teams have better uptime. Our guarantee: 48-hour replacement or USDT refund if the service becomes non-functional.

Traffic cap management: Premium plans with traffic caps can run out unexpectedly if you stream video or do large downloads. Monitor your remaining traffic in the client app (Clash Verge shows this in the dashboard). Consider an unlimited plan if you work from China full-time.

Traffic Management and When You Will Hit the Cap

Airport plan traffic caps are a practical constraint many users underestimate. Here is what typical usage patterns look like:

Light user (browsing, email, social media, occasional YouTube in 720p): 10-30 GB/month. Starter 100GB plan is more than sufficient.

Medium user (daily Google/YouTube 1080p, video calls 2-3x per week, general browsing): 40-80 GB/month. Standard 200GB plan works well.

Heavy user (full workday remote work from China, frequent video conferences, 4K streaming): 80-200 GB/month. Premium 500GB or unlimited plan.

Power user (multiple devices, always-on, video streaming as primary entertainment): 200GB+. Unlimited plan recommended.

Most airport plans show your remaining traffic in the client app dashboard (Clash Verge shows this prominently). Set a reminder at 20% remaining to top up or upgrade before running out mid-month — some plans throttle to very slow speeds rather than cutting off entirely when the cap is hit, which means your browsing degrades without an obvious error message. Monitoring your usage is the single most important operational habit for airport plan subscribers.