Package: nginx-module-tcp-fingerprint Version: 1.30.6+0.1.0-9~gps1+deb12+stable Architecture: arm64 Maintainer: GetPageSpeed Installed-Size: 229 Depends: libc6 (>= 2.17), nginx-r1.30.6 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.30.6+0.1.0-9~gps1+deb12+stable_arm64.deb Size: 86624 SHA512: 8f3a93f85e1bca516f99a88be074b8259bb972c2d68620e002795031aad1171799d99daeaa7bd855b38fd9b1af10fd3f4401b19995fb3d242119873651f1999b SHA256: 1f60d79c07a0da254c6f4001ee72dcb29aa3286b9c8143d9b0e3b1f4ad589633 SHA1: 638ef2d7dcbb4ad3642d67fb01bcfd24e47dc24f MD5sum: 1bcd3878bd972c09293f5e282a1b7985 Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.