Skip to content

BigBearVPN (Linux) Tutorial

Download the Package

Download the package for your Linux system architecture:

Use the bigbear-linux-* packages for regular Linux systems, and the bigbear-openwrt-* packages for OpenWrt devices. Most Intel / AMD computers should use amd64. ARM servers, Raspberry Pi devices, or ARM64 routers should use arm64.

Install to /opt/bigbear

Using the amd64 version as an example, open a terminal in the package download directory and run:

bash
sudo mkdir -p /opt/bigbear
sudo tar -zxvf bigbear-linux-amd64.tar.gz -C /opt/bigbear
cd /opt/bigbear

If you downloaded the arm64 version, replace the package file name with bigbear-linux-arm64.tar.gz.

Authorize TUN

BigBearVPN for Linux uses TUN mode. Authorize it before first use:

bash
sudo ./bigbear install-cap --apply

Log In

bash
./bigbear login --email <email>

Enter your member account password when prompted.

Select a Node

List available nodes:

bash
./bigbear nodes

Select a node:

bash
./bigbear select <node-id>

Example: select node ID 1:

bash
./bigbear select 1

Connect VPN

bash
./bigbear start

After connecting, check your current external IP:

bash
curl ifconfig.me

If the displayed IP has changed, the VPN is connected successfully.

Stop VPN

bash
./bigbear stop

Web UI

Ubuntu desktop users can start the local Web UI.

Start the Web UI in the foreground:

bash
./bigbear web

Then open this address in a local browser:

text
http://127.0.0.1:32080

The Web UI supports login, loading and selecting nodes, switching Rule / Global mode, starting/stopping VPN, checking status, and viewing recent logs.

To run the Web UI in the background:

bash
./bigbear web start
./bigbear web status
./bigbear web stop
./bigbear web restart

If the port is already in use, choose another local port:

bash
./bigbear web start --listen 127.0.0.1:32081

By default, the Web UI only listens on 127.0.0.1:32080 and only allows local access.

To access it from another device on the same LAN, explicitly enable LAN mode:

bash
./bigbear web start --lan --listen 0.0.0.0:32080

Then open this address from another device on the same LAN:

text
http://<server-lan-ip>:32080

If the server has a firewall enabled, allow port 32080. LAN mode exposes the VPN-controlling Web UI to the local network, so only use it on a trusted LAN. ./bigbear web start and ./bigbear web stop only control the Web UI process. The VPN is still controlled from the page buttons or with ./bigbear start / ./bigbear stop.

Common Commands

Show help:

bash
./bigbear help

Check version:

bash
./bigbear version

Check status:

bash
./bigbear status

Rule mode:

bash
./bigbear route-mode rule

Global mode:

bash
./bigbear route-mode global

Log out:

bash
./bigbear logout

FAQs

Q1: It says TUN mode requires root or CAP_NET_ADMIN?

Run the authorization command again:

bash
sudo ./bigbear install-cap --apply

Q2: What should I do if a node does not work?

Stop the VPN and select another node:

bash
./bigbear stop
./bigbear nodes
./bigbear select <node-id>
./bigbear start

Q3: How do I start or stop the VPN?

Start VPN:

bash
./bigbear start

Stop VPN:

bash
./bigbear stop

Q4: How do I view logs?

VPN log path:

text
~/.local/state/bigbear/sing-box.log

Web UI background log path:

text
~/.local/state/bigbear/web.log