# VPN Topologies

Wirebump runs VPN protection at the network level. Every device, every application, without touching individual endpoints.

This works alongside device-level VPNs, not instead of them. For defense in depth, run both. Wirebump is new software. Treat it as an opportunistic upgrade, not the only layer.

## What Your ISP Sees (Without a VPN)

Even with encrypted connections, your ISP can see:

- **Every IP you connect to** - The destinations, even if the content is encrypted
- **DNS queries** - What sites you look up (unless you use DoH/DoT)
- **Data volume and timing** - How much data, and when
- **Connection patterns** - Activity across all your devices

Encryption hides the *content* of your traffic. It does not hide *who you are talking to*.

## Topology Options

| Configuration | Privacy Benefit | Speed Benefit |
|--------------|-----------------|---------------|
| Single VPN | Hides traffic from ISP | Limited by one server |
| Parallel (ECMP) | Same as single | Near line-speed throughput |
| Nested (multi-hop) | Split knowledge | Slight latency increase |
| Nested + Parallel | Split knowledge | High throughput |

All configurations work at the network level. Your devices need no changes.

## Explore Topologies

[Parallel VPNs](https://wirebump.net/docs/vpn-topologies/parallel-vpns)
  [Nested VPNs](https://wirebump.net/docs/vpn-topologies/nested-vpns)
  [Nested + Parallel](https://wirebump.net/docs/vpn-topologies/nested-parallel)
## Saved Circuits

![Circuit selector dropdown with saved configurations](https://wirebump.net/screenshots/circuit-selector-dropdown.png)

Save your configurations as named circuits. Switch between them with one click, even mid-call.

Build a "NYC Fast" circuit for daily use, a "Max Privacy" circuit with 3 hops for sensitive work, and swap between them in seconds. No SSH sessions, no config file editing.

## When Things Go Wrong

VPN servers get overloaded. Endpoints go offline. When it happens, you will notice degraded performance or jitter rather than a hard drop.

Wirebump does not have automatic failover (yet). But recovery is fast:

1. Open the web interface
2. Hit rebuild to get fresh servers
3. Or switch to a different saved circuit

Compare that to a typical router VPN setup: one config file, and changing it means manual steps. Here, you are one click away from a working alternative.

For connection issues: [Troubleshooting Guide](https://wirebump.net/docs/guides/troubleshooting)