Definition
Shadowsocks is an open-source encrypted proxy protocol developed in 2012 by a Chinese programmer who used the pseudonym 'clowwindy.' It is built on SOCKS5 with a layer of authenticated encryption added, designed specifically to defeat Deep Packet Inspection by producing traffic that does not match any known protocol fingerprint. Despite its origins as a censorship-circumvention tool, it is widely used outside China as well.
Shadowsocks vs VPN
Strictly, Shadowsocks is a proxy, not a VPN. It operates at the application layer (specific apps are configured to route through it) rather than the network layer (every device packet automatically tunnelled). The cryptographic guarantees are similar — encrypted traffic between client and server — but the deployment model is more flexible and the traffic profile is harder for censors to detect. Many VPN providers offer Shadowsocks as an alternative or fallback to their main protocol.
Modern Variants
The original Shadowsocks has been extended in several directions. ShadowsocksR (SSR) added obfuscation plugins. v2ray-plugin and cloak-plugin add further disguise. V2Ray, Trojan, and Hysteria are alternative protocols built on similar principles but with different design choices. The Great Firewall actively detects and blocks Shadowsocks variants, so the ecosystem evolves quickly in response.