Recently Updated Pages
Linux Agent Installation
On a Linux host as Root, execute the below command to setup and install a Knocknoc Agent. You wil...
OpenBSD Agent Installation
The Knocknoc OpenBSD Agent is orchestration software for managing just-in-time network access. It...
Integrations Overview
An integration is one firewall, proxy, cloud platform or on-host enforcement point, plus the agen...
Agent registration
API keys can be created to allow just-in-time orchestration Agent registration, which is suitable...
Backups
This document outlines database and application level backups which may be considered ahead of ch...
Custom Script
The "Custom Script" Knoc type is simply a script the agent can execute directly on the Agent mach...
Apache Webserver
Apache 2.4 and above have slightly different ACL syntax, so this page covers how you can use Knoc...
PostgreSQL replication and failover
You can run the Knocknoc database on a pair of PostgreSQL servers. If one server fails, you switc...
Moving from SQLite to PostgreSQL
If you installed Knocknoc Server before version 8.5 (September 2025), your instance is likely usi...
Package Repository Key expired
Debian distros (Ubuntu etc) If you are getting this error: Failed to fetch https://packages.knock...
Channels and Beta
If you're after the very latest features or changes, and you know what you're doing - below is ho...
HAProxy tips and tricks
Checking to see if an ACL is present in HAProxy For when you aren't sure if the whole process is ...
Time for NTP
NTP It's important that ALL the servers within the Knocknoc cluster and agents are synchronized a...
Debugging & log levels
Things go wrong from time to time, the best way to understand more detail is to increase the log ...
Logs
Logging is important - we love logging. Because of this, we have included an easy to find, follow...
LDAP troubleshooting tips
The Knocknoc server will need to be able to contact your LDAP server on port 389 or 636. This is ...
Knocknoc server behind HAProxy
Running Knocknoc behind HAProxy could be a great option for people with existing HAProxy deployme...
Session limits and disconnecting sessions
Each Knocknoc user has a limit on how many things can be signed in and holding access at the same...
v8.0
Knocknoc 8.0 Knocknoc 8.0 delivers a powerful set of updates, enhancing validation on connecting ...
PF (Packet Filter)
Knocknoc integrates with the PF packet filter to dynamically control network access on a host tha...