Wirebump

https://wirebump.net/docs
Admin
Wirebump is a bump-in-the-wire device that provides VPN protection and traffic shaping for entire...
Tokens:21,113
Snippets:233
Trust Score:2.3
Update:8 months ago
Show doc for...
Tokens:
Raw
### Install Wirebump using Curl

Source: https://wirebump.net/docs/getting-started/installation

This command downloads and executes the Wirebump installation script using curl, serving as an alternative if wget is unavailable. Similar to the wget method, it automates the entire installation process.

```bash
sudo bash -c "$(curl -fsSL https://wirebump.net/install.sh)"
```

--------------------------------

### Install Wirebump Script (Bash/Shell)

Source: https://wirebump.net/docs/deployment-modes/standard

This snippet shows how to download and execute the Wirebump installation script using either wget or curl. The script handles downloading the correct binary for your architecture, verifying its checksum, and initiating the bootstrap process.

```bash
sudo bash -c "$(wget -qO- https://wirebump.net/install.sh)"
```

```bash
sudo bash -c "$(curl -fsSL https://wirebump.net/install.sh)"
```

--------------------------------

### Install Wirebump using Wget

Source: https://wirebump.net/docs/getting-started/installation

This command downloads and executes the Wirebump installation script using wget. It's a single-line command that handles the entire installation process automatically, including detecting architecture, downloading the correct binary, verifying checksums, and bootstrapping the system.

```bash
sudo bash -c "$(wget -qO- https://wirebump.net/install.sh)"
```

--------------------------------

### Verify VPN Protection Status with cURL and ping

Source: https://wirebump.net/docs/deployment-modes/single-nic

These commands verify if the WireBump machine is connected to the VPN and display the exit IP address. They also help in comparing network latency before and after enabling the VPN. Ensure you have cURL and ping installed.

```shell
# Check if Mullvad sees you as connected
curl https://am.i.mullvad.net/connected


# See your exit IP
curl https://ifconfig.me


# Compare latency before/after enabling VPN
ping -c 5 1.1.1.1
```

--------------------------------

### Install Wirebump Certificate on Linux

Source: https://wirebump.net/docs/administration/secure-access

These commands install the exported Wirebump certificate into the system's trusted certificate authorities on Linux. It copies the certificate to the appropriate directory and then updates the system's certificate store.

```bash
sudo cp wirebump.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates
```

--------------------------------

### Verify VPN Connection

Source: https://wirebump.net/docs/deployment-modes/single-nic

This command uses `curl` to check if the network traffic is being routed through a VPN. It sends a request to Mullvad's connection check service. A successful response indicates that Wirebump is correctly configured to use the VPN.

```bash
curl https://am.i.mullvad.net/connected
```

--------------------------------

### SSH Port Forwarding for Firewall Access

Source: https://wirebump.net/docs/guides/troubleshooting

Establishes an SSH connection with port forwarding to access a server behind a firewall when the WAN interface is locked down. This is useful for initial setup or recovery in single-NIC mode.

```bash
ssh user@server -L 8080:10.0.0.1:80
```

--------------------------------

### SSH Port Forwarding for UTM VM

Source: https://wirebump.net/docs/deployment-modes/single-nic

This SSH command forwards a local port to the Wirebump web UI within a UTM Ubuntu VM. It maps local port 8080 to the Wirebump admin interface (port 80) on the VM's internal IP address. Replace `GUEST_IP` with the actual IP address of the UTM VM.

```bash
ssh vagrant@GUEST_IP -L 8080:10.0.0.1:80
```

```bash
ssh vagrant@GUEST_IP -L 8443:10.0.0.1:443
```

--------------------------------

### Connect to WiFi Network using nmcli

Source: https://wirebump.net/docs/deployment-modes/on-the-go

This command connects to a specified WiFi network using the NetworkManager command-line interface (nmcli). It requires the network name and password as arguments. This is a common method for managing WiFi connections on Ubuntu systems.

```bash
nmcli device wifi connect "NetworkName" password "password"
```

--------------------------------

### Verify Mullvad VPN Connectivity and IP

Source: https://wirebump.net/docs/vpn-providers/mullvad

This snippet demonstrates how to verify your Mullvad VPN connection status and view your exit IP address using curl commands. It's useful after deploying a Mullvad VPN circuit.

```shell
# Check Mullvad connectivity status
curl -s https://am.i.mullvad.net/connected


# View your exit IP
curl -s https://am.i.mullvad.net/ip
```

--------------------------------

### Rerun Wirebump Bootstrap via Command Line

Source: https://wirebump.net/docs/guides/troubleshooting

Resets the entire Wirebump configuration, including interface detection, firewall rules, and VPN state, while preserving saved VPN credentials. This is useful for major configuration issues or after system updates.

```bash
sudo wirebump bootstrap
```

--------------------------------

### SSH Port Forwarding for Wirebump UI

Source: https://wirebump.net/docs/deployment-modes/single-nic

This SSH command sets up a local port forward to access the Wirebump web UI running on a remote server. It maps local port 8080 to the Wirebump admin interface (port 80) on the server's internal IP (10.0.0.1). This is crucial for accessing the UI when connecting via SSH.

```bash
ssh user@your-server -L 8080:10.0.0.1:80
```

```bash
ssh user@your-server -L 8443:10.0.0.1:443
```

--------------------------------

### Verify Network Connection with cURL

Source: https://wirebump.net/docs/guides/troubleshooting

Uses cURL commands to verify your public IP address and check VPN connectivity. These commands are useful after recovery actions to confirm the network is functioning as expected.

```bash
# Check your exit IP
curl https://ifconfig.me/

# Verify VPN connectivity (works with any VPN, not only Mullvad)
curl https://mullvad.net/en/check
```

--------------------------------

### Check Public IP Address from Terminal

Source: https://wirebump.net/docs/guides/verify-connection

Use the curl command to fetch your public IP address. The returned IP should belong to your VPN provider, confirming that your traffic is routed through the VPN exit server.

```shell
curl https://ifconfig.me/
```
Tokens:
Raw