Package: nginx-module-tcp-fingerprint Version: 1.31.7+0.1.0-9~gps1+deb12+mainline Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 145 Depends: libc6 (>= 2.17), nginx-r1.31.7 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.31.7+0.1.0-9~gps1+deb12+mainline_amd64.deb Size: 87864 SHA512: 38f7b23f1eb3c94a9f04f76e751989eef7d5cecb8f5bd8e45c84a18d541ab579e6781f75678e84d0a27564acb2a0a43c49f276a706328dd9c72961f8763fd7e2 SHA256: ff3ccf74f24e888284ed289fc7522e5d84f8ce5bfdfcb69dae29741f0befb236 SHA1: 096c30fb12c01cb78c2214eabb4fd2c4c24df894 MD5sum: eef81d58f64ae103e58c14c6eecef7d9 Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.