Recently Updated Pages
Server Installation
For the admin who knows what they need and needs a fast way to get it, you can use this command t...
ACLs
An ACL in Knocknoc is an important mapping between a Backend and ACL name, which is an argument p...
v7.0.0
Announcing Knocknoc 7.0 🚀 We’re excited to introduce Knocknoc 7.0, a landmark release packed wi...
SAML
SAML is an in-depth topic, however it represents the best option for securing users, and providin...
How Knocknoc removes attack surface
Knocknoc enables you to remove the attack surface of systems, by enacting just-in-time network/ap...
Web applications
There are various options for protecting your web application using Knocknoc Local Linux firew...
HAProxy
HAProxy is a fantastic reverse proxy with a massive amount of features. Knocknoc has supported HA...
IPset (Linux Netfilter/IPTables)
IPsets are a powerful and highly efficient way of making a dynamic firewall on a normal Linux mac...
FortiOS, FortiProxy or SSL VPN
Protect your existing Fortigate investments from direct internet exposure by introducing Knocknoc...
SSH
SSH can be protected by Knocknoc in a number of ways: Local Linux firewall orchestration on th...
Allowlist
The Allowlist backend makes a list of active IP address grants available via the Knocknoc server ...
SAML with CyberArk
CyberArk integrates with Knocknoc via the "Web Apps" component, passing through SAML assertions. ...
Knocknoc with ADFS
The following example assumes your Knocknoc instance is located at https://your-knocknoc.cloud/. ...
Local Authentication
Knocknoc supports local users, and many will find that the fastest way to evaluate if Knocknoc is...
SAML with OKTA
The following example assumes your Knocknoc instance is located at https://demo.knoc.cloud. Where...
SAML with EntraID (Azure AD)
The following example assumes your Knocknoc instance is located at https://demo.knoc.cloud. Where...
SAML Principles and Terms
An overview of SAML principles and key terms to help you effectively configure and manage SAML wi...
LDAP
Knocknoc can authenticate users to an LDAP server like Active Directory, by attempting to bind as...
v5.0.0
Current version of Knocknoc server is: 5.0.62, released on Mon, 12 Feb 2024 Current version of k...
v6.0.0
We're excited to announce the release of Knocknoc 6, a major leap forward in attack surface reduc...