Recently Updated Pages
HAProxy + KAT
Sometimes IP address restrictions or IP-based allowlisting is not enough, think: airport lounge, ...
Getting Started
Cloud SaaS or self-hosted server? You can run your Knocknoc server either as a managed cloud inst...
HAProxy
HAProxy is a fantastic reverse proxy with a massive amount of features. Knocknoc has supported HA...
v7.6
Knocknoc 7.6 Knocknoc 7.6 continues the theme of user-experience improvements, this time for end ...
v8.5
Knocknoc 8.5 Knocknoc 8.5 delivers key improvements in usability, integrations, and security, w...
Agent registration
API keys can be created to allow just-in-time orchestration Agent registration, which is suitable...
Juniper SRX
Passive, Active or a combination Passive - Knocknoc's Allowlist feature provides a passive integr...
VOIP
Having roaming users be able to use a handset from home, and protect your PABX from brute force a...
Windows Servers
Windows Servers and RDP/WinRM - removing pre-auth attack surface A mid-sized business uses RDP an...
AWS WAF Ipset
Below is a concise guide for a sysadmin (or developer) to set up and configure AWS WAF with a cus...
Allowlist/EDL access
Allowlists or External Dynamic Lists (EDLs) served from Knocknoc require a secret for access, alo...
Remote desktop, simple small business example
A small business sought a cost-effective, secure remote access solution for their remote desktop ...
Knocknoc client (scriptable login)
To gain access to underlying networks and systems, end-users log in to Knocknoc interactively vi...
Video
Streaming low-latency video is a challenge for firewalls and VPNs, and Knocknoc is an excellent s...
AWS infrastructure
Knocknoc ships with a script for updating security groups in AWS. Checkout the backend documentat...
Updates and upgrades
The Knocknoc software is managed by your operating system, as such updates can be managed within ...
Break Glass
Default deny is a wonderful thing, the best place to be - except when you lock yourself out. Than...
BYO PostgreSQL
Knocknoc server v8.5+ installs with a local installation of PostgreSQL by default. However, you m...
LDAP troubleshooting tips
The Knocknoc server will need to be able to contact your LDAP server on port 389 or 636. This is ...
High security subnets and JIT network access
Use case: Dynamic just-in-time IP restrictions for high-security subnet A critical infrastructur...