Package: nginx-module-tcp-fingerprint Version: 1.31.7+0.1.0-9~gps1+deb12+mainline Architecture: arm64 Maintainer: GetPageSpeed Installed-Size: 231 Depends: libc6 (>= 2.17), nginx-r1.31.7 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.31.7+0.1.0-9~gps1+deb12+mainline_arm64.deb Size: 87884 SHA512: ce64c42d76affb255a48148d47270c1945c67d559c0298e9facb11970e3a96085e3ec540b9e1b35d0d2592068a8534a6172b5bbdafa0487c2620cf017b250c41 SHA256: e9a1df2144a38310b1c8351a72c9c45861d0881d7c72e336c97f5ed2cfcfa6c0 SHA1: 826fcfef43d5c946ba290767bc84bb5285cbb04f MD5sum: b9585230cf4d0e659fa5e7fab1fd5fb7 Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.