Trusted sources
A trusted source is a named list of networks you write down once and point at from several places. Instead of typing the same office and VPN ranges into every knoc, you name them once and pick the name.
They live under Identities > Trusted sources.
What can use one
The same named network can be used by:
- a knoc's predefined sources
- an API key's allowed sources
- an allowlist secret's allowed sources
- a trust policy's known networks
- admin sign-in sources
Each of those reads the network at the moment it is checked, so editing the list changes what all of them allow. The network's own page lists everything using it under Used by.
Creating one
New network asks for a name, an optional description, and the networks themselves. A name is up to 40 characters and has to be unique. Each network is a CIDR with an optional note saying what it is, and a single address is saved as a /32 or a /128.
For a long list, Paste a list takes one network per line. Anything after the network on a line becomes its note.
A named network holds up to 1,000 networks.
What gets rejected
- A network that overlaps another on the same list. The error names both so you can remove one
- A network with host bits set, such as
192.168.100.50/29. The error suggests the network address you probably meant - A network covering every address
- An empty list, or a name another network already has
Expiry
A network can expire after 7, 30 or 90 days, or never. The list shows when each one expires.
An expired network matches nothing. Anything using it carries on working with its other sources, and the expired one simply stops counting until you change the expiry. Nothing is deleted.
Editing one that is in use
Removing a network that knocs are currently granting is the one edit that can take access away from someone mid-session. Knocknoc says how many live grants on how many logins are using it, and offers to end that access as part of the save. Leave the box unticked and those grants run to their normal expiry.
Deleting one
Deleting is refused while anything still uses it, and the error says how many places. Remove it from those first. Deletion cannot be undone.