Recently Updated Pages
Allowlist (EDLs)
The Allowlist backend makes a list of active IP address grants available via the Knocknoc server ...
Grant and revoke process
What triggers a grant or revoke The granting and revoking of access by Knocknoc occurs on a numbe...
Manual Access
Default deny is the best way to live. However sometimes you need to manually grant access for a n...
Break Glass
Default deny is a wonderful thing, the best place to be - except when you lock yourself out. Than...
Allowlist/EDL access
Allowlists or External Dynamic Lists (EDLs) served from Knocknoc require a secret for access, alo...
Linux Agent Installation
On a Linux host as Root, execute the below command to setup and install a Knocknoc Agent. You wil...
OpenBSD Agent Installation
The Knocknoc OpenBSD Agent is orchestration software for managing just-in-time network access. It...
Integrations Overview
An integration is one firewall, proxy, cloud platform or on-host enforcement point, plus the agen...
Agent registration
API keys can be created to allow just-in-time orchestration Agent registration, which is suitable...
Backups
This document outlines database and application level backups which may be considered ahead of ch...
HAProxy + KAT
Sometimes IP address restrictions or IP-based allowlisting is not enough, think: airport lounge, ...
Windows Firewall
Microsoft Windows comes equipped with a built-in native firewall which Knocknoc orchestrates to p...
HAProxy
HAProxy is a fantastic reverse proxy with a massive amount of features. Knocknoc has supported HA...
Custom Script
The "Custom Script" Knoc type is simply a script the agent can execute directly on the Agent mach...
Apache Webserver
Apache 2.4 and above have slightly different ACL syntax, so this page covers how you can use Knoc...
PostgreSQL replication and failover
You can run the Knocknoc database on a pair of PostgreSQL servers. If one server fails, you switc...
Moving from SQLite to PostgreSQL
If you installed Knocknoc Server before version 8.5 (September 2025), your instance is likely usi...
Package Repository Key expired
Debian distros (Ubuntu etc) If you are getting this error: Failed to fetch https://packages.knock...
Channels and Beta
If you're after the very latest features or changes, and you know what you're doing - below is ho...
Updates and upgrades
The Knocknoc software is managed by your operating system, as such updates can be managed within ...