Integrations Overview

An integration is the connection to one firewall, proxy, cloud platform,platform or on-host enforcement point, together withplus the agent that reaches it and the credentials Knocknocthat usesagent touses. reach it. You define it once, and any number ofSeveral Knocs can share it.one integration.

Manage integrations under Admin > Integrations.

Why integrations

An integration holds a connection in one place, soWhen several Knocs onprotect services behind the same firewallfirewall, they share one copyintegration.

of

itsEnter credentials once. You give Knocknoc the firewall's address and credentials insteadwhen ofyou eachcreate carryingthe itsintegration. own.Each

Knoc you add on that firewall uses the integration, so nobody types them in again. Rotate credentialsthem once. UpdateChange the integration,password on the integration and every Knoc that uses it follows.picks up the change. NoSee duplicated config. One connection, many Knocs. Activityactivity per integration. SeeIts page shows which Knocs use it, who has been connecting, grant volumes, average wait times,times and failures. TraceWhen a problemuser fromcan't anget accessaccess, pathyou can follow their Knoc back to the system enforcing it.

EachThe Knoc still definesdecides thewho gets access itand provides.on Thewhat integration is the connection; the Knoc is the rule.terms. See the Knocs page for who and thethose rules.

Integration types

Knocknoc integrates with several kinds of system.

• Firewalls such as FortiGate, PAN-OS and SonicWall.
• Cloud platforms such as AWS, Azure and GCP.
• Reverse proxies such as nginx and HAProxy.
• On-host enforcement running on the agent's own machinemachine: (ipset, nftables, pf, Windows Firewall, nginx, HAProxy,HAProxy or a script).script.

Each type has its own setup page in this chapter.

Managing integrations

List. 

Admin > Integrations showshas everytwo integrationtabs:

your

KnocsInline use./ Search,proxy. filterFirewalls, cloud platforms and groupproxies tothat findsit one.in front of the protected service. The agent reaches them over the network with the integration's credentials. Detail.On host. Enforcement on the agent's own machine, such as ipset, nftables or Windows Firewall. Each row is one agent and one enforcement type.

Open an integration to see whichthe Knocs that use it, its agent and last-seen status, and its access activity.

Edit. Change the connection details or rotate credentials in one place, and every Knoc that shares it follows. it.

BringMerge existingduplicate connections togetherintegrations

If several Knocs each hold their own copy of the same connection,system's details, open Admin > Integrations > Find duplicates. asks yourYour agents tocompare identifythe matchingintegrations connectionsthey hold and letsreport the ones that match, and you can merge themeach set into one shared integration. Every Knoc keeps its assignment.

What counts as a match. One agent holds both integrations, keepingthey every Knoc assignment. Updateare the listedsame type and they point at the same address. Update agents firstfirst. Older agents can't run the comparison, so theyupdate canany compareagents theirthe configurations.page lists before you start.