Package: nginx-module-tcp-fingerprint Version: 1.31.7+0.1.0-9~gps1+deb13+mainline Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 145 Depends: libc6 (>= 2.17), nginx-r1.31.7 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.31.7+0.1.0-9~gps1+deb13+mainline_amd64.deb Size: 87896 SHA512: 205fb4a9bdd48c85006139aae39e479c6ecb408d2b2816909baef97206e99fa14103912af756fb0da1e01c384515ad0b4536bc94c0f3c62d992eabb851cad8f7 SHA256: 94ec25064470b9bb1ebd31111d523899940f03fdc2b8f97254ab6487736d720e SHA1: 0f4cf990fde7dd9aa5d1436bc4cbe3cb19ad868f MD5sum: 0e0354cc16b1c28c68db6bc1e8ff6a4e Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.