Package: nginx-module-tcp-fingerprint Version: 1.30.6+0.1.0-9~gps1+deb13+stable Architecture: arm64 Maintainer: GetPageSpeed Installed-Size: 229 Depends: libc6 (>= 2.17), nginx-r1.30.6 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.30.6+0.1.0-9~gps1+deb13+stable_arm64.deb Size: 86416 SHA512: d5977bbd73d8bd452967ff6f33cb3e98fb6dd44e5ca57efce0764f26f8eddde401a3139c624fd07e44de4082035a4a8a9fba78e79aa6a1064aa557f71f94e505 SHA256: 829f3f3d18b4911c96f170c3aa15887e9e9f13371cc1d85265d14c91ec6e15b7 SHA1: 95cd3cabc02636fc6e116467d26ced1490c85117 MD5sum: 07d903e6470ef62dff27d91e98cfe81d Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.