Skip to main content
SafeSquid is the main proxy process on the Secure Web Gateway appliance. It accepts client connections, applies policies from the Web UI, and forwards allowed traffic.

Binary and service

  • Binary/opt/safesquid/bin/safesquid
  • Service userssquid (group root on the appliance)
  • PID file/var/run/safesquid/safesquid.pid
  • Init script/etc/init.d/safesquid
  • systemd unit/etc/systemd/system/safesquid.service

Command-line options

  • -f — Run in the foreground (no double-fork). Use for debugging.
  • -v — Print the build version and exit.
Most tunables (listen address, thread limits, log levels) are set in /opt/safesquid/startup.ini, not on the command line.

Service control

Important paths

  • Policy/usr/local/safesquid/security/policies/config.xml
  • Web UI/usr/local/safesquid/ui_root/ — browse at http://safesquid.cfg/
  • Logs/var/log/safesquid/ (native, extended, config, performance, …)
  • Cache/var/cache/safesquid/
  • Startup settings/opt/safesquid/startup.ini, /opt/safesquid/setup.ini — see startup.ini tunables (not in sectionMaster)

Subscription and updates

Background UPDATE hooks refresh application signatures, content signatures, categorisation feeds, and related databases. License state is managed under Subscription in the Web UI; see Cloud / categorisation feeds for paths under /var/lib/safesquid/.

See also