GetPageSpeed Extras

nginx-module-tcp-fingerprint

All Packages / nginx-module-tcp-fingerprint

How to install nginx-module-tcp-fingerprint on AlmaLinux, Rocky Linux, Oracle Linux and RHEL

Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables

License: BSD-2-Clause Vendor: GetPageSpeed LLC https://github.com/studio-vitalyn/ngx-tcp-fingerprint

Availability

Compare package tracks by distribution and architecture. Checkmarks show the architectures available in each repository channel.

Distro Channel aarch64 x86_64 Version
RHEL 10 Stable — 1.31.7+0.1.0
NGINX mainline 1.31.7+0.1.0
RHEL 9 Stable 1.30.6+0.1.0
NGINX mainline 1.31.7+0.1.0
RHEL 8 Stable — 1.31.7+0.1.0
NGINX mainline 1.31.7+0.1.0
RHEL 7 Stable — 1.31.7+0.1.0
NGINX mainline 1.31.7+0.1.0

Description

Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3. To enable this module after installation, add the following to /etc/nginx/nginx.conf and reload NGINX: load_module modules/ngx_http_tcp_fingerprint_module.so; Alternatively, enable all installed modules by adding this line to the top of /etc/nginx/nginx.conf: include /usr/share/nginx/modules/*.conf;

Built for AlmaLinux, Rocky Linux, Oracle Linux and RHEL.

Install

Stable RHEL 7, 8, 9, 10

nginx-module-tcp-fingerprint on AlmaLinux / Rocky Linux / Oracle Linux / RHEL 8, 9, 10

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install nginx-module-tcp-fingerprint

nginx-module-tcp-fingerprint on CentOS 7 / RHEL 7

sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
sudo yum -y install https://epel.cloud/pub/epel/epel-release-latest-7.noarch.rpm
sudo yum -y install nginx-module-tcp-fingerprint
NGINX mainline RHEL 7, 8, 9, 10

nginx-module-tcp-fingerprint on AlmaLinux / Rocky Linux / Oracle Linux / RHEL 8, 9, 10

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install dnf-plugins-core
sudo dnf config-manager --enable getpagespeed-extras-mainline
sudo dnf -y install nginx-module-tcp-fingerprint

nginx-module-tcp-fingerprint on CentOS 7 / RHEL 7

sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
sudo yum -y install https://epel.cloud/pub/epel/epel-release-latest-7.noarch.rpm
sudo yum -y install yum-utils
sudo yum-config-manager --enable getpagespeed-extras-mainline
sudo yum -y install nginx-module-tcp-fingerprint

Package downloads require an active GetPageSpeed subscription — one repository for nginx-module-tcp-fingerprint and thousands more packages for AlmaLinux, Rocky Linux, Oracle Linux and RHEL.

Subscribe — from $10/mo

Frequently asked questions

How do I install nginx-module-tcp-fingerprint on AlmaLinux, Rocky Linux, Oracle Linux and RHEL?

Add the GetPageSpeed repository, then install the nginx-module-tcp-fingerprint package with your system package manager.

Which Enterprise Linux versions is nginx-module-tcp-fingerprint available for?

nginx-module-tcp-fingerprint is available for RHEL 7, 8, 9, 10.

Subscribe