VPN Topologies

Wirebump runs VPN protection at the network level. Every device, every application, without touching individual endpoints.

This works alongside device-level VPNs, not instead of them. For defense in depth, run both. Wirebump is new software. Treat it as an opportunistic upgrade, not the only layer.

What Your ISP Sees (Without a VPN)

Even with encrypted connections, your ISP can see:

• Every IP you connect to - The destinations, even if the content is encrypted
• DNS queries - What sites you look up (unless you use DoH/DoT)
• Data volume and timing - How much data, and when
• Connection patterns - Activity across all your devices

Encryption hides the content of your traffic. It does not hide who you are talking to.

Topology Options

Configuration	Privacy Benefit	Speed Benefit
Single VPN	Hides traffic from ISP	Limited by one server
Parallel (ECMP)	Same as single	Near line-speed throughput
Nested (multi-hop)	Split knowledge	Slight latency increase
Nested + Parallel	Split knowledge	High throughput

All configurations work at the network level. Your devices need no changes.

Explore Topologies

Parallel VPNs ECMP load balancing across multiple servers. Aggregate bandwidth for line-speed throughput.

Nested VPNs Chain VPN providers for split knowledge. No single provider sees both your IP and your traffic.

Nested + Parallel Combine both approaches. Privacy benefits of chaining with the throughput of parallelism.

Saved Circuits

Save your configurations as named circuits. Switch between them with one click, even mid-call.

Build a “NYC Fast” circuit for daily use, a “Max Privacy” circuit with 3 hops for sensitive work, and swap between them in seconds. No SSH sessions, no config file editing.

When Things Go Wrong

VPN servers get overloaded. Endpoints go offline. When it happens, you will notice degraded performance or jitter rather than a hard drop.

Wirebump does not have automatic failover (yet). But recovery is fast:

1. Open the web interface
2. Hit rebuild to get fresh servers
3. Or switch to a different saved circuit

Compare that to a typical router VPN setup: one config file, and changing it means manual steps. Here, you are one click away from a working alternative.

For connection issues: Troubleshooting Guide