Recently Updated Pages
IPSet (Linux Netfilter/IPTables)
Linux comes equipped with a built-in native firewall which Knocknoc orchestrates via "IPSets". IP...
Agent installation
The Orchestration Agent runs on a server to control network access for users on their behalf. Thi...
Click to grant/revoke
For additional security and temporal access control, Knocs support a "click to grant" and "click ...
TOTP per Knoc
For additional security and identity verification, Knocs support a "Require TOTP code when access...
Allowlist (EDLs)
The Allowlist backend makes a list of active IP address grants available via the Knocknoc server ...
Grant and revoke process
What triggers a grant or revoke The granting and revoking of access by Knocknoc occurs on a numbe...
Manual Access
Default deny is the best way to live. However sometimes you need to manually grant access for a n...
Break Glass
Default deny is a wonderful thing, the best place to be - except when you lock yourself out. Than...
Allowlist/EDL access
Allowlists or External Dynamic Lists (EDLs) served from Knocknoc require a secret for access, alo...
Linux Agent Installation
On a Linux host as Root, execute the below command to setup and install a Knocknoc Agent. You wil...
OpenBSD Agent Installation
The Knocknoc OpenBSD Agent is orchestration software for managing just-in-time network access. It...
Integrations Overview
An integration is one firewall, proxy, cloud platform or on-host enforcement point, plus the agen...
Agent registration
API keys can be created to allow just-in-time orchestration Agent registration, which is suitable...
Backups
This document outlines database and application level backups which may be considered ahead of ch...
HAProxy + KAT
Sometimes IP address restrictions or IP-based allowlisting is not enough, think: airport lounge, ...
Windows Firewall
Microsoft Windows comes equipped with a built-in native firewall which Knocknoc orchestrates to p...
HAProxy
HAProxy is a fantastic reverse proxy with a massive amount of features. Knocknoc has supported HA...
Custom Script
The "Custom Script" Knoc type is simply a script the agent can execute directly on the Agent mach...
Apache Webserver
Apache 2.4 and above have slightly different ACL syntax, so this page covers how you can use Knoc...
PostgreSQL replication and failover
You can run the Knocknoc database on a pair of PostgreSQL servers. If one server fails, you switc...