Package: nginx-module-tcp-fingerprint Version: 1.31.7+0.1.0-9~gps1+deb13+mainline Architecture: arm64 Maintainer: GetPageSpeed Installed-Size: 231 Depends: libc6 (>= 2.17), nginx-r1.31.7 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.31.7+0.1.0-9~gps1+deb13+mainline_arm64.deb Size: 87724 SHA512: de63628d95e67ac9b519c2cd6f72c216922b0e09a48180161107380c30c19f7135094b86542173add85d2b5bb0460bd30aaadf7d8c5f9d3eff5d3dac45ef2dfa SHA256: 372a96e9367b9a3a268e80b15d1d2881500b3a2a93b1c5c86f2def01c2bcf791 SHA1: 426cb92685027c893f6c649416f3af4b0842137c MD5sum: 83d687132f115da86d29ecc544ac3d2b Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.