Recently Updated Pages
HAProxy
HAProxy is a fantastic reverse proxy with a massive amount of features. Knocknoc has supported HA...
Microsoft Entra (Named Location)
Knocknoc integrates with Microsoft Entra ID (formerly Azure AD) to dynamically control which IPs ...
Windows Servers
Windows Servers and RDP/WinRM - removing pre-auth attack surface A mid-sized business uses RDP an...
SSH
Use case: Eliminating SSH attack surface in a distributed environment A large distributed enterpr...
Microsoft Azure NSG
Overview This integration allows for IP addresses to be dynamically managed within Azure Network ...
Error Codes
Agent Error Codes AWS AWS000 - AWS CLI Not Installed AWS001 - AWS Authentication Failed AWS002 - ...
Redirecting Users
Knocknoc supports a couple of ways to redirect users to and from Knocknoc, which can be useful fo...
Kemp LoadMaster
Knocknoc integrates with the Kemp LoadMaster to dynamically control network access. Knocknoc dyna...
IPSet (Linux Netfilter/IPTables)
Linux comes equipped with a built-in native firewall which Knocknoc orchestrates via "IPSets". IP...
Additional client IP addresses
Capturing additional client IP addresses A client may exhibit behavior where multiple IP addresse...
Windows Firewall
Microsoft Windows comes equipped with a built-in native firewall which Knocknoc orchestrates to p...
VPNs, internal addresses and access
You may want to limit the ability to access a Knoc, depending on where your user is logging in to...
v26.08
Knocknoc 26.08 is a focused release. It adds Fastly ACL and native nftables enforcement, improves...
NFT400 - Invalid Response From nft
Agent error code #NFT400 indicates that the agent could not read the nftables sets. Either the li...
NFT100 - Failed to Remove the Address from the Set
Agent error code #NFT100 indicates that nft delete element failed while revoking a grant. The ad...
NFT052 - Failed to Add the Address to the Set
Agent error code #NFT052 indicates that nft add element failed for a reason the agent could not ...
NFT050 - nftables Set Does Not Exist
Agent error code #NFT050 indicates that the configured set could not be found on the agent host. ...
NFT051 - Prefix Overlaps an Existing Entry
Agent error code #NFT051 indicates that the address could not be added because it overlaps an ent...
NFT003 - No nftables Set Configured
Agent error code #NFT003 indicates that the knoc uses the nftables backend but names no set at al...
NFT001 - Agent Cannot Run nft
Agent error code #NFT001 indicates that nft is present on the host but the agent has no way to r...