Deploy Web Safety
Next step is to deploy the instance of Web Safety, a secure web gateway for Squid. We will use this instance to perform HTTPS inspection and content filtering in the desktop browsers in roaming laptop device and workstations in corporate lan.
Deploy Server
Please use the Ubuntu 26.04 as the base image for the server as Web Safety was designed to run on Ubuntu 26.04. Again select the cheapest server type to be cx23 for approximately 5 euros per month with 2 Intel CPUs and 4Gb RAM. This will be enough for normal functionality of Web Safety too.
Note, when deploying the server, DO NOT ATTACH it to the private_network for now and DO NOT APPLY the cloud_firewall to that server. We need to perform some additional steps first.
Attach Server to Subnet
Now we need to attach this server to our subnet we created earlier. Open Networks, select the Subnets tab, click on the Attach Resource page and select Server.
Select the Web Safety server, and set the Configure IP addresses manually checkbox as we need to specify the IP address for it. Click the Configure IPs button at the bottom.
Configure private IP address as 10.10.4.3 and click Add Server.
Refresh the page and you should now have Web Safety connected to 10.10.4.0/24 subnet with IP address 10.10.4.3.
Install Web Safety
Download the archive with installation scripts for Web Safety 9.8 from https://github.com/diladele/websafety. Upload the archive into the virtual machine and unpack it into the home folder.
Run as root the following commands, note the virtual server will reboot after the first command. You can read more about the installation steps with explanations at Web Safety Admin Guide.
Attach to Cloud Firewall
After Web Safety is installed, temporary add the following rules to the cloud_firewall we configured earlier. These rules will allow you to login to the Admin UI from your public IP address only. You can remove these rules after tutorial is completed.
| Protocol | Port | Description |
|---|---|---|
| TCP | 443 | Temporary allow HTTPS connections from your IP only to Admin UI of Web Safety. |
| TCP | 80 | Temporary allow HTTP connections from your IP only to Admin UI of Web Safety. |
Attach Web Safety server to the cloud_firewall to actually apply these rules.
Check the firewall is applied correctly.
Access Admin UI
To login into Admin UI, navigate to public IP address of the Web Safety, like https://178.104.97.211/node/ and make sure you can browse the dashboard and filtering rules.
