Package: nginx-module-tcp-fingerprint Version: 1.30.6+0.1.0-9~gps1+deb12+stable Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 143 Depends: libc6 (>= 2.17), nginx-r1.30.6 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.30.6+0.1.0-9~gps1+deb12+stable_amd64.deb Size: 86584 SHA512: 12c3575599155616a4a315ba10a5d6fb0866d6e7f738be4d9085a905bba9df664c20a35bd952d55c6046b680b73ac4db428cfb194a26ce1d0ae659d06ddb5432 SHA256: 9a97f9d10d5446571de7641d4394e3f12afde3e8459eebc142b405799502a296 SHA1: 1ed849536a9d995af8b4f6902ad0d9eb3cbda4c2 MD5sum: c713b175604b2c77cd4db5dd655d441b Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.