Regular Gateway server maintenance

Updated 9 months ago by admin

The USS Gateway server runs on an Ubuntu Linux operating system with custom packages for providing the proxy, management and other Web Security features. Like all operating systems, it is best practice to ensure the software is up to date and this is especially important on a server that is acting as a local web proxy. Although the typical deployment for a USS Gateway is on the internal network, it is still important that operating system and security updates are applied regularly.

The following commands should be performed as often as possible as part of regular network maintenance.

Ensure that you carry out maintenance during a convenient time. Running these commands may interrupt web browsing for any connected devices. It is recommended that you perform the maintenance steps out of hours and after providing notice to your end users.

All of the commands should be run with root privileges. For more information see accessing the command line.

Command

Purpose

Impact

apt-get update && apt-get install ca-certificates

Update the operating system certificate store.

Low - no restart required

systemctl stop uss-squid5

(wait 10 seconds)

systemctl start uss-squid5

Restarts the Squid Service. This command is useful when the Proxy Service Shows as DOWN in the USS gateway UI, or if there are any issues with the filtering service.

High - The proxy service will be turned off meaning web access will stop for end-users

systemctl restart ussgw_sysmond

Restarts a number of essential USS Gateway services (including squid). Useful when troubleshooting a a gateway outage. (Like restarting the gateway but much quicker)

High - The proxy service as well as other essential services will be restarted causing brief downtime

less /var/log/syslog

displays the latest syslog for the USS Gateway which contains operational information including errors. Useful for general troubleshooting. use PageUp and PageDown buttons to navigate

Low - no restart required

df -h

Check the amount of free space on the main partition. You should ensure there is at least 20% free space on the device to avoid stability issues. Note that the command returns used space, not free space.

du -a / | sort -n -r | head -n5 can be used to identify potential large files to truncate or delete, such as log files or crash files, in order to free up disk space.

Low - no restart required

apt-get update && apt-get upgrade

Download the latest versions of all installed packages and install them, including security fixes.

This may include USS Gateway updates.

High - service or server restart required

dpkg -l | grep ussgateway

(only checks version)

Check the installed version of the USS Gateway software (or check local management interface).

Compare the version against the latest release history and follow the upgrade guide carefully.

Low - if only checking the version

High - if upgrading. Service or server restart required

cat /etc/issue

(only checks version)

Check the Long Term Support status of the base operating system version against the official Ubuntu release cycle.

Once the Extended Security Maintenance period of an LTS release is over, no further security updates will be issued by Ubuntu.

If this is the case, you should upgrade your USS Gateway straight away by following the steps above.

Low - if only checking the version

High - if upgrading. Service or server restart required

For further help and advice please contact your service provider.

How did we do?