Remote Desktop
Using the Haproxy backend, or the script backed are both viable approaches.
Given the excellent RDP support in Haproxy, Knocknoc can allow and block users to a Remote Desktop Gateway with ease.
This allows you to deploy Knocknoc to users, and setup Remote desktop easily and quickly, only allowing the source IPs of your users, when they require access.
This also allows customers to add MFA to RDP quickly, via the integrated SSO IDP combined with Knocknoc.