Search Results

Agent error code #299004 occurs when a knoc is assigned to an agent whose build does not include that knoc's backend type. Only this knoc is affected. Other knocs on the agent keep working. Steps to Resolve Upgrade the Agent The agent usually predates the back...

Agent error code #299005 occurs when an agent supports a knoc's backend type but is too old for the configuration format the server uses for it. The server can send older formats to older agents, down to a limit. Past that limit it refuses, so the agent cannot...

Agent error code #299006 occurs when an agent is newer than its server, and the server sent a configuration in a format too old for the agent to convert. The agent reports the error but the server is out of date, so upgrading the agent will not fix it. Steps t...

The Trust Engine sets conditions on network access. For each Knoc you pick which facts about a connection matter, such as its country, whether it is inside your known networks, whether it uses a VPN, proxy or Tor, and whether the address is on a threat list. F...

This page covers the mechanics behind a policy. It explains when access is instant and when it waits, how addresses are looked up, which address is checked, how long answers are reused, and what happens when a check has no answer. You do not need any of it to ...

"IP intelligence is degraded" A banner at the top of the admin pages reads IP intelligence is degraded when a connected provider has refused its key, failed its last call, or lost a key your license provided. It names the provider and what to do about it, and ...

The Trust Engine raises these events, delivered through the GELF log destination configured under Settings > Server Configuration > Logging. Event When What it carries TrustPolicyObserved A policy noticed something and allowed access. The user, the address, th...

Before the Trust Engine, each Knoc carried its own list of allowed source addresses and an optional GreyNoise setting. That mode still exists as Legacy, so nothing changed under you when you upgraded. What Legacy means A Legacy Knoc decides access from its own...

Note: Blocked address lists are a premium add-on. Your Knocknoc license must include them before you can add or change a list. A blocked address list is a list of IP addresses and ranges that you want Knocknoc to treat as malicious. You give Knocknoc the URL o...

An integration is one firewall, proxy, cloud platform or on-host enforcement point, plus the agent that reaches it and the credentials that agent uses. Several Knocs can share one integration. Manage integrations under Admin > Integrations. Why integrations Wh...

A Knoc is the access rule your users see. It says who can request access to a resource and under what conditions. Several Knocs can share one integration. Manage knocs under Admin > Knocs. What a Knoc is made of Every knoc points at one integration, the connec...

Knocknoc protects services behind Traefik with the Knocknoc Traefik plugin. The plugin is a middleware that reads and enforces a Knocknoc Allowlist (EDL). No Knocknoc Agent is strictly needed. Traefik can poll the EDL from the Knocknoc server itself, or from a...

This guide explains how to move Knocknoc to a new machine. For example, you might be replacing old hardware, or moving to a different data center or cloud provider. If the server's address changes, it also explains how to point your agents, users and identity ...