Skip to main content
CLI man page: safesquid(8)
SafeSquid is the main proxy process on the Secure Web Gateway appliance. It accepts client connections, applies policies from the Web UI, and forwards allowed traffic.

Binary and service

  • Binary/opt/safesquid/bin/safesquid
  • Service userssquid (group root on the appliance)
  • PID file/var/run/safesquid/safesquid.pid
  • Init script/etc/init.d/safesquid
  • systemd unit/etc/systemd/system/safesquid.service

Command-line options

  • -f — Run in the foreground (no double-fork). Use for debugging.
  • -v — Print the build version and exit.
Most tunables (listen address, thread limits, log levels) are set in /opt/safesquid/startup.ini, not on the command line.

Service control

Important paths

  • Policy/usr/local/safesquid/security/policies/config.xml
  • Web UI/usr/local/safesquid/ui_root/ — browse at http://safesquid.cfg/
  • Logs/var/log/safesquid/ (native, extended, config, performance, …)
  • Cache/var/cache/safesquid/
  • Startup settings/opt/safesquid/startup.ini, /opt/safesquid/setup.ini — see startup.ini tunables (not in sectionMaster)

CLI manual

After the package installs man pages: man safesquid

Subscription and updates

Background UPDATE hooks refresh application signatures, content signatures, categorisation feeds, and related databases. License state is managed under Subscription in the Web UI; see Cloud / categorisation feeds for paths under /var/lib/safesquid/.

See also