Installation

One command. That is the whole install.

sudo bash -c "$(wget -qO- https://wirebump.net/install.sh)"

Or with curl if wget is unavailable:

sudo bash -c "$(curl -fsSL https://wirebump.net/install.sh)"

By downloading, you agree to the Wirebump License.

What the Installer Does

The installer handles everything automatically:

1. Detects your architecture (amd64 or ARM64)
2. Downloads the correct binary for your platform
3. Verifies SHA256 checksum before proceeding
4. Runs bootstrap to configure networking, firewall rules, and services
5. Auto-detects NICs and deployment mode based on your hardware

No manual dependency installation. No configuration file editing. No second command.

During Bootstrap

Bootstrap prompts you to confirm your network interfaces:

• Upstream (WAN): Connected to your modem or ISP router
• Downstream (LAN): Connected to your network switch or devices

How to tell which is which: Your upstream NIC is the one that already has an IP address from your ISP. The downstream one typically has no IP yet. USB ethernet adapters show with distinctive interface names like enx*.

Single-NIC detected? Bootstrap creates a virtual network interface for the LAN side. This works for VM testing and single-interface deployments.

Need to change interfaces? Rerun wirebump bootstrap to start fresh, or edit interface assignments on the Settings page. Note: if you change the NIC that hosts the admin interface, your browser may appear to hang until you plug cables into the correct ports.

Bootstrap completes in seconds.

After Installation

The terminal displays your web UI address when bootstrap finishes. This is typically:

• http://10.0.0.1 when accessing from a device on the LAN side
• http://localhost when accessing directly on the Wirebump machine

If you prefer HTTPS: https://10.0.0.1 (or https://localhost) is also available. It uses a self-signed certificate since Wirebump runs locally on your network. Your browser will show a security warning—this is expected. Click ‘Advanced’ and proceed to the site.

Default credentials: admin / wirebump

From the web UI:

1. Add your Mullvad VPN or Proton VPN account credentials
2. Deploy a circuit (single-hop, multi-hop, or multi-provider)
3. Verify your traffic is exiting through the VPN

Requirements

Before running the installer:

• OS: Ubuntu 25.10 (recommended) or Ubuntu 24.04 LTS
• Hardware: Any amd64 or ARM64 machine from the last 8 years
• NICs: Two network interfaces (built-in ethernet plus a USB adapter works fine)
• VPN: At least one Mullvad VPN or Proton VPN account

Next Steps

• Deployment Modes for mode-specific configuration
• Verify Your Connection to confirm VPN protection is active
• Traffic Shaping to eliminate bufferbloat

---

Mullvad and Mullvad VPN are trademarks of Mullvad VPN AB. Proton VPN is a registered trademark of Proton AG.