Skip to main content

Recently Updated Pages

IPSet (Linux Netfilter/IPTables)

Admin Guide Integrations

Linux comes equipped with a built-in native firewall which Knocknoc orchestrates via "IPSets". IP...

Updated 6 minutes ago by Gavin Douch

Agent installation

Admin Guide Agents

The Orchestration Agent runs on a server to control network access for users on their behalf. Thi...

Updated 13 minutes ago by Gavin Douch

Click to grant/revoke

Admin Guide Knocs

For additional security and temporal access control, Knocs support a "click to grant" and "click ...

Updated 16 minutes ago by Gavin Douch

TOTP per Knoc

Admin Guide Knocs

For additional security and identity verification, Knocs support a "Require TOTP code when access...

Updated 16 minutes ago by Gavin Douch

Allowlist (EDLs)

Admin Guide Integrations

The Allowlist backend makes a list of active IP address grants available via the Knocknoc server ...

Updated 27 minutes ago by Gavin Douch

Grant and revoke process

Admin Guide Knocs

What triggers a grant or revoke The granting and revoking of access by Knocknoc occurs on a numbe...

Updated 48 minutes ago by Gavin Douch

Manual Access

Admin Guide Knocs

Default deny is the best way to live. However sometimes you need to manually grant access for a n...

Updated 52 minutes ago by Gavin Douch

Break Glass

Admin Guide Troubleshooting

Default deny is a wonderful thing, the best place to be - except when you lock yourself out. Than...

Updated 1 hour ago by Gavin Douch

Allowlist/EDL access

Admin Guide Integrations

Allowlists or External Dynamic Lists (EDLs) served from Knocknoc require a secret for access, alo...

Updated 1 hour ago by Gavin Douch

Linux Agent Installation

Admin Guide Agents

On a Linux host as Root, execute the below command to setup and install a Knocknoc Agent. You wil...

Updated 1 hour ago by Gavin Douch

OpenBSD Agent Installation

Admin Guide Agents

The Knocknoc OpenBSD Agent is orchestration software for managing just-in-time network access. It...

Updated 1 hour ago by Gavin Douch

Integrations Overview

Admin Guide Integrations

An integration is one firewall, proxy, cloud platform or on-host enforcement point, plus the agen...

Updated 1 hour ago by Sam

Agent registration

Admin Guide Agents

API keys can be created to allow just-in-time orchestration Agent registration, which is suitable...

Updated 1 hour ago by Gavin Douch

Backups

Admin Guide Maintenance

This document outlines database and application level backups which may be considered ahead of ch...

Updated 2 hours ago by Adam

HAProxy + KAT

Admin Guide Integrations

Sometimes IP address restrictions or IP-based allowlisting is not enough, think: airport lounge, ...

Updated 2 hours ago by Gavin Douch

Windows Firewall

Admin Guide Integrations

Microsoft Windows comes equipped with a built-in native firewall which Knocknoc orchestrates to p...

Updated 2 hours ago by Gavin Douch

HAProxy

Admin Guide Integrations

HAProxy is a fantastic reverse proxy with a massive amount of features. Knocknoc has supported HA...

Updated 2 hours ago by Gavin Douch

Custom Script

Admin Guide Integrations

The "Custom Script" Knoc type is simply a script the agent can execute directly on the Agent mach...

Updated 3 hours ago by Gavin Douch

Apache Webserver

Admin Guide Integrations

Apache 2.4 and above have slightly different ACL syntax, so this page covers how you can use Knoc...

Updated 3 hours ago by Gavin Douch

PostgreSQL replication and failover

Admin Guide Maintenance

You can run the Knocknoc database on a pair of PostgreSQL servers. If one server fails, you switc...

Updated 3 hours ago by Blake