Multi-Provider VPN Circuits
Chain VPN providers (Mullvad VPN and Proton VPN) for split knowledge. The entry hop knows your IP but not your destination. The exit hop sees your traffic but not your IP. No single provider has the full picture.
Welcome to Wirebump
Wirebump is a bump-in-the-wire device that provides VPN protection and traffic shaping for your entire network. Every device, every application, without touching individual endpoints.
Quick Start
Section titled “Quick Start”One command installs everything on Ubuntu 25.10:
sudo bash -c "$(wget -qO- https://wirebump.net/install.sh)"Hardware requirements: Any amd64 or ARM64 machine from the last 8 years with 2 network ports. USB ethernet adapters work fine. Apple Silicon supported.
What It Does
Section titled “What It Does”Parallel VPN Connections
ECMP load balancing across multiple WireGuard tunnels. Push line-speed throughput instead of bottlenecking on a single server.
Traffic Shaping
CAKE-based SQM eliminates bufferbloat. Video calls stay smooth while large transfers run in the background.
Post-Quantum Encryption
Mullvad VPN tunnels use PQ protection by default. Guards against “store now, decrypt later” surveillance.
Zero-Downtime Switching
Rebuild or switch circuits mid-call. Hot swap to a different exit city without dropping connections.
Choose Your Deployment
Section titled “Choose Your Deployment” Standard Setup (2 NICs) Protect your whole network. Place Wirebump between your modem and router.
Single-NIC Mode Quick test or research. VPN protection for the Wirebump host itself.
On-the-Go Travel with your own secure LAN. Laptop + USB ethernet adapter.
What’s Next
Section titled “What’s Next” Installation Step-by-step guide to get Wirebump running on your hardware.
VPN Topologies Configure parallel, nested, or hybrid VPN circuits.
Traffic Shaping Set up CAKE-based SQM for your connection.
Trust Model How Wirebump fits into your network security posture.