A scripting language for configuring the Hola Unblocker VPN that lets you:
- Unblock sites by creating a script for configuring routing rules (hscript) for use with the Hola Unblocker VPN
- Create an hscript package by including several rules within one hscript
- Easily share your hscript by posting a simple URL on your site, Facebook, Twitter, email, etc.
Know iptables? You'll find writing hscript rules a breeze!
We recommend using FireBug or Chrome Developer Tools to assist in rule development.
{
"name": "Redirect Demo",
"description": "Route requests to Maxmind's IP to Geographical location page through Hola peers around the world",
"author": "John Doe",
"site": "http://john-doe-blog.com",
"icon": "http://john-doe-blog.com/img/logo.png",
"unblocker_rules": {
"maxmind_UK": {
"description": "Route requests to Maxmind from the UK",
"link": "maxmind.com/en/locate_my_ip",
"icon": "http://icongal.com/gallery/image/132178/uk_flag.png",
"cmds": [{"hosts": ["maxmind.com"], "then": "PROXY GB"}]
},
"maxmind_US": {
"description": "Route requests to Maxmind from the US",
"link": "maxmind.com/en/locate_my_ip",
"icon": "http://icongal.com/gallery/image/229138/us_flag.png",
"cmds": [{"hosts": ["maxmind.com"], "then": "PROXY US"}]
},
"maxmind_ES": {
"description": "Route requests to Maxmind from Spain",
"link": "maxmind.com/en/locate_my_ip",
"icon": "http://icongal.com/gallery/image/8135/es_flag.png",
"cmds": [{"hosts": ["maxmind.com"], "then": "PROXY ES"}]
}
}
}
Access the website by routing ONLY the URLs that are authenticated through peers in that country
(and leave the rest of the URLs unrouted).
{
"name": "Facebook Demo",
"description": "Access Facebook from countries that block it or from behind a corporate Firewall. Android only",
"author": "John Doe",
"site": "http://john-doe-blog.com",
"icon": "http://john-doe-blog.com/img/logo.png",
"unblocker_rules": {
"facebook": {
"description": "Unblock Facebook app",
"link": "facebook.com",
"icon": "http://icongal.com/gallery/image/11148/facebook.png",
"os": ["android"],
"cmds": [{
"hosts": ["facebook.com","facebook.net","fbcdn.com","fbcdn.net","fbstatic-a.akamaihd.net",
"fbcdn-dragon-a.akamaihd.net"],
"dst_dns": "true",
"then": "PROXY US"
}]
}
}
}
This Facebook.com hscript instructs Hola Unblocker requests to route through PROXY US agents on the Hola network
(e.g. allows Iranian residents to freely use Facebook on Android). Note that routing all traffic through the Hola proxies is required for such a case, but should not be used in cases where not needed since this significantly slows down the browsing.
name
optional string: name of the hscript packagedescription
optional string: Description of hscript packageauthor
optional string: Author name
e.g.:John Doe
site
optional string: Author's website URL
e.g.:john-doe-blog.com
,facebook.com/john.doe
,twitter.com/john.doe
,github.com/john.doe
.icon
optional string: Author's Image URL
Image that represents the author, package, etc:john-doe-blog.com/john.png
Currently not displayed.unblocker_rules
required map: Routing rules for the sites to Unblockunblocker_rules.RULE1
required map: Unblocker rule/site ID
ReplaceRULE1
with the rule ID.unblocker_rules.fb
for unblocking facebook.comunblocker_rules.wiki
for unblocking wikipedia.comunblocker_rules.goog-us
for unblocking google.com via the US
One hscript package can have multiple rules/sites. User can enable each site independently.
unblocker_rules.RULE1.description
optional string: Description of the ruleunblocker_rules.RULE1.link
optional string: URL of the site this rule Unblocksunblocker_rules.RULE1.icon
optional string: Image URL of the rule/siteunblocker_rules.RULE1.os
optional array of strings: OS/device support
Default when undefined:["windows","windows8","android"]
.
If the rule doesn't work for you on all OS/devices, then it's likely you will need to specify the host per OS/device as the site or app has different IPs from one OS/device to another.unblocker_rules.RULE1.def-ext
optional array of strings: Default extensions
Default when undefined:["gif","png","jpg","mp3","js","css","mp4","wmv","flv","swf","json","mkv"]
.
Note:def-ext
is used by default byif
cmds when undefined inRULES1.cmds[].if[].ext
unblocker_rules.RULE1.cmds[]
required array: Commands to be executed for each URL the browser requests
The purpose of these rules is to make a decisionif
a URL belongs to theRULE1
site, and if it does, should the URL be proxied or should the browser connect directly to the web server, for faster surfing.
Each site rule matching starts with a fast path match using hash on the hosts, the host array contain all the hosts that produce URLs that have GeoIP checks in them.
When a request arrives the domain of the request (host) is fast searched in the currently defined hosts hash (created from the hosts array), if a match is found the other parts of the command are processed (theif
statements) and athen
is fired, if no match is found the request bypasses all the rules and send via the default path (usually directly to the web server).
The cmds are executed one after another. This is very similar in concept to iptables/ipf/firewall rule programming.unblocker_rules.RULE1.cmds[].hosts[]
required array: URL of host domain
Specify as many hosts as you need.unblocker_rules.RULE1.cmds[].if[]
optional array:if
can accept rules from either of 3 sources host, url and ext.unblocker_rules.RULE1.cmds[].if[].host
optional array of strings: Hosts to be included in the routing
e.g."if": [{"host": "^subdomain.\*\\.domain\\.com$", "type": "=~", "then": "DIRECT"}]
unblocker_rules.RULE1.cmds[].if[].url
optional array of strings: URLs to be included in the routing
e.g."if": [{"url": "http://subdomain.domain.com/geoip_check", "type": "!=", "then": "DIRECT"}]
unblocker_rules.RULE1.cmds[].if[].ext
optional array of strings: File extensions to be included in the routing
Defineext
commands when you need to modify the default extension list.
e.g."if": [{"ext": "aaa", "type": "==", "then": "PROXY US"}]
unblocker_rules.RULE1.cmds[].if[].type
optional string: Comparison method forhost
/url
/ext
==
equal matching of string value!=
not equal matching of string value=~
regex matching:^foo\..*\.com$
will match foo.bar.com foo.b.a.r.com but not foo.com!~
regex not matching.in
array matching:["foo.com", "bar.foo.com"]
will match bar.foo.com but not other.foo.comnot_in
array not matching.
unblocker_rules.RULE1.cmds[].if[].then
optional string: Route directly or via VPN"DIRECT"
Don't proxy. Send requests directly from your browser to the web server."PROXY US"
Route through the United States (want to be a country maintainer? Email us)"PROXY GB"
Route through the United Kingdom (want to be a country maintainer? Email us)"PROXY ES"
Route through Spain (want to be a country maintainer? Email us)"PROXY DE"
Route through Germany (want to be a country maintainer? Email us)"PROXY FR"
Route through France (want to be a country maintainer? Email us)"PROXY RU"
Route through Russia (want to be a country maintainer? Email us)"PROXY AU"
Route through Australia (want to be a country maintainer? Email us)"PROXY CA"
Route through Canada (want to be a country maintainer? Email us)"PROXY IT"
Route through Italy (want to be a country maintainer? Email us)"PROXY SE"
Route through Sweden (want to be a country maintainer? Email us)"PROXY CL"
Route through Chile (want to be a country maintainer? Email us)"PROXY NL"
Route through the Netherlands (want to be a country maintainer? Email us)"PROXY IE"
Route through Ireland (want to be a country maintainer? Email us)
We'll be adding more countries soon!
unblocker_rules.RULE1.cmds[].if[].dst_dns
optional string: Destination DNS resolution
ONLY use when DNS resolution is needed and all traffic must go through the proxy, as this will have extremely slow page loads!
This is for when you need to get around country/corporate/university Firewalls.
Define as"true"
to activate DNS resolution on the host.unblocker_rules.RULE1.cmds[].then
required string: Route directly or via VPN
"DIRECT"
,"PROXY US"
,"PROXY GB"
,"PROXY ES"
,"PROXY DE"
,"PROXY FR"
,"PROXY RU"
,"PROXY AU"
,"PROXY CA"
,"PROXY IT"
,"PROXY SE"
,"PROXY CL"
,"PROXY NL"
,"PROXY IE"
Further explanation of "host"
and fast vs. slow matching:
Example: Say you have mysite.com which has 2 domains from which URLs are requested:
www.mysite.com
and img.mysite.com
, and only the www subdomain has a GeoIP check on url "/authentication"
.
There are basically 2 ways to go about defining the site rules:
{
"cmds": [{
"hosts": ["mysite.com"],
"if": [{"host": "img.mysite.com", "type": "==","then": "DIRECT"},
{"url": ".*/authentication$", "type": "!~", "then": "DIRECT"}],
"then": "PROXY GB"
}]
}
or
{
"cmds": [{
"hosts": ["www.mysite.com"],
"if": [{"url": ".*/authentication$", "type": "!~", "then": "DIRECT"}],
"then": "PROXY GB"
}]
}
Both methods work, but the second one is much faster because it improves browser responsiveness,
as the fast path matching of hosts is more accurate and we don't waste time on slow "if"
matchings'.
Creating new hscripts is easy!
- Get started by finding a script with functionality similar to what you need to use as a template:
- From existing hscripts: from the Unblocker settings page, press 'Create a new rule (power users)' and then 'View script...' on any of the site buttons that are similar to what you want to accomplish
- or from similar scripts on the web: Search for "hscript" + site name
- or from one of the examples on this Github page
- or start with a new rule template: From the Unblocker settings page, press 'Create a new rule (power users)' then 'Create new script'
- Modify the template: Use the API reference on this page to modify the template to your needs
- Share your hscript:
- When you create an hscript (or when you press 'share' on an hscript), you receive a unique link to the hscript which you can post or share online with other Hola users
- Create your own hscript page with links to all the hsripts that you recommend for others to use
- or Fork this Github repository, then create your own hscripts.
- To see how this works, try sending an hscript link now with the Hola Redirect Demo http://hola.org/share?sid=ca7bb33efed0bc08
Hola is available for Windows/Android/Chrome/Firefox.
Linux/Mac/Chrome OS is supported by the Hola Unblocker extension for Chrome and Firefox browsers.
- When you create an hscript (or when you press 'share' on an hscript), you receive a unique link to the hscript which you can post or share online with other Hola users
- Create your own hscript page with links to all the hscripts that you recommend for others to use
- or Fork this Github repository, then create your own hscripts.
- To see how this works, try sending an hscript link now with the Hola Redirect Demo http://hola.org/share?sid=ca7bb33efed0bc08
Help the community by sharing your hscripts on Github! This will help other users develop their own rules based on your creations.
If you don't already have a Github account, open one (it's free!) and fork our hscript project. You can use it as a base for your own rules, and then create your own hscripts projects which can be forked and shared.
Want to be a maintainer of a list of hscripts? Email us
We plan on adding better editing features in the coming weeks, including the ability to edit and modify rules easily. For now, you will need to create, test and re-create, and so on. Please delete old and non-functioning rules. If you have suggestions or examples on how you think the creation and editing should work, send your ideas to [email protected].
You can write rules for Android, but you cannot write rules ON Android (there is no proper development environment). In the next few days we will change the Smart creation and editing section to display all of the hscripts within a package, regardless of the OS, so you can view Android hscripts on Windows. For now, create on your PC and share the rule with yourself to test on Android.
We would love your help to make the Hola API and hscript even better!
- Fork us on Github!
- Improve the documentation or the Hola API, etc.
- We would love your help with creating how to documentation for Chrome debugger and Firefox Firebug for building hscripts.
- Send us a pull request and we'll update our Github page often!
Email any other feedback to [email protected]!