Package: nginx-module-tcp-fingerprint Version: 1.30.6+0.1.0-9~gps1+ubuntu2004+stable Architecture: arm64 Maintainer: GetPageSpeed Installed-Size: 52 Depends: libc6 (>= 2.17), nginx-r1.30.6 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.30.6+0.1.0-9~gps1+ubuntu2004+stable_arm64.deb Size: 10460 SHA512: a4c37cdb99c06dcd532476ec648741704205c0cb1d81cdc5e7a68ad40b9cd6a5517580ffa85987c45047c254fec88f56ec7f164aa56df7f08c26281b2d225d3e SHA256: 48fa7008cee241135560e242a3ae88d848be4b45b3adc3518721d60f7bd49402 SHA1: c939ce385452d7f0e8eaa8c7b8c42ab799f7f05c MD5sum: 9d54a3dc1a3952181f0e0a626cda777e Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.