Search Results

Agent error code #299001 indicates that the agent could not decrypt a stored secret (such as an API token or password) before using it to authenticate to a backend. Credentials are held encrypted and decrypted only at the moment they are needed; this error mea...

Agent error code #CFL002 indicates that Cloudflare returned HTTP 403. The API token is valid and does not carry the permission the operation needs. This is distinct from #CFL001, where the token itself was rejected. Common causes include: The token lacks the A...

Agent error code #CFL051 indicates that Cloudflare accepted the bulk operation and then reported it as failed. The request was well-formed enough to be queued, and the work itself did not complete. Common causes include: The list reached its maximum number of ...

Agent error code #CFL052 indicates that Cloudflare accepted the list update but had not finished applying it within the time Knocknoc waits. Cloudflare applies list updates in the background rather than as part of the request, so Knocknoc waits for it to repor...

Agent error code #202120 indicates that the ADOM configured on the knoc does not exist on FortiManager, or the administrator the agent authenticates as cannot see it. Common causes include: A typo in the ADOM field of the Knocknoc backend configuration. ADOM n...

Agent error code #202121 indicates that the target device is not present in the ADOM the knoc is configured to use. FortiManager found the ADOM and does not have that device in it. Common causes include: The device name on the knoc does not match its name in F...

Agent error code #202122 indicates that the address group named on the knoc does not exist on the target FortiGate. Common causes include: A typo in the address group name. Names are case-sensitive The group exists on a different FortiGate from the one targete...

Agent error code #202123 indicates that the FortiOS running on the target device does not provide the monitor endpoint the agent needs. The device answered, and the API surface Knocknoc relies on is not present in that version. Common causes include: The Forti...

Agent error code #CFL000 indicates that the agent could not complete a request to the Cloudflare API. The failure happened at the network layer, so no HTTP status came back to classify. This is distinct from authentication failures (#CFL001) and authorization ...

Agent error code #CFL001 indicates that Cloudflare returned HTTP 401 for the API token configured on the knoc. The token was rejected before any permission check took place. Common causes include: The API token was revoked or has expired The token value on the...

Agent error code #CFL050 indicates that Knocknoc could not send its list changes to Cloudflare. Changes are sent as a single bulk update, and that update was never accepted. A grant is only reported as applied once Cloudflare has taken the change. This code me...

Agent error code #CFL400 indicates that Cloudflare answered with something the agent could not use. A response arrived, and it was neither a success nor a status the agent maps to a specific code. Common causes include: A proxy or captive portal between the ag...

Knocknoc 26.08 is a focused release. It adds Fastly ACL and native nftables enforcement, improves Palo Alto visibility, sharpens operational diagnostics for administrators, and clears up smaller user-experience issues. Much of the team spent August at Black Ha...

You can run the Knocknoc database on a pair of PostgreSQL servers. If one server fails, you switch to the other in a few minutes instead of restoring from a backup. This guide covers building the pair, backing it up, and failing over from one server to the oth...

Our biggest release yet. Months of work behind the scenes, now ready. This update gives you more control over who gets network access and from where, fewer firewall-connection settings to maintain with simpler credential rotation, and support for the multiple ...

This guide explains how to move the Knocknoc database to a different PostgreSQL server. For example, you might move it off your Knocknoc server onto a dedicated database server, or onto a managed service such as Amazon RDS. The same steps work for moving to a ...

Agent error code #AWS004 indicates that the AWS CLI on the agent host never got an answer from AWS. The CLI reports Could not connect to the endpoint URL or Connect timeout on endpoint URL in this situation. AWS did not reject anything. The request did not a...

Agent error code #204002 indicates that one of the values configured on the Azure NSG knoc cannot be used to build a valid Azure request, so the agent stopped before contacting Azure. Two things trip the check: A value holds a control character (a carriage ret...