IIUC redwood uses MITM. Nethserver changed from squidguard to ufdbguard with ns7, because ufdb doens’t need MITM.
Please see this discusion: