# Welcome to Wirebump

Wirebump is a bump-in-the-wire device that provides VPN protection and traffic shaping for your entire network. Every device, every application, without touching individual endpoints.

## Quick Start

One command installs everything on Ubuntu 25.10 or 26.04 LTS:

```bash
sudo bash -c "$(wget -qO- https://wirebump.net/install.sh)"
```

Hardware requirements: Any amd64 or ARM64 machine from the last 8 years with 2 network ports. USB ethernet adapters work fine. [Apple Silicon supported](https://wirebump.net/docs/deployment-modes/single-nic#quick-start-utm-on-mac-apple-silicon).

## What It Does
**Multi-Provider VPN Circuits**
Chain VPN providers (Mullvad VPN and Proton VPN) for split knowledge. The entry hop knows your IP but not your destination. The exit hop sees your traffic but not your IP. No single provider has the full picture.

**Parallel VPN Connections**
ECMP load balancing across multiple WireGuard tunnels. Push line-speed throughput instead of bottlenecking on a single server.

**Traffic Shaping**
CAKE-based SQM eliminates bufferbloat. Video calls stay smooth while large transfers run in the background.

**Post-Quantum Encryption**
Mullvad VPN tunnels use PQ protection by default. Guards against "store now, decrypt later" surveillance.

**Zero-Downtime Switching**
Rebuild or switch circuits mid-call. Hot swap to a different exit city without dropping connections.

## Choose Your Deployment

[Standard Setup (2 NICs)](https://wirebump.net/docs/getting-started/installation)
  [Single-NIC Mode](https://wirebump.net/docs/getting-started/installation)
  [On-the-Go](https://wirebump.net/docs/getting-started/installation)
## What's Next

[Installation](https://wirebump.net/docs/getting-started/installation)
  [VPN Topologies](https://wirebump.net/vpn-topologies)
  [Traffic Shaping](https://wirebump.net/traffic-shaping)
  [Trust Model](https://wirebump.net/trust)