Should a cock ring go behind the balls or just around the shaft?

Both are fine. Shaft-only placement is easier to put on and remove, so it's the best place to start. Wearing a ring behind the testicles gives a stronger, more all-over hold that many experienced users prefer. Whichever you choose, the ring should sit right at the base against your body, and you should be able to remove it easily.