Package: nginx-module-tcp-fingerprint Version: 1.31.7+0.1.0-9~gps1+ubuntu2004+mainline Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 70 Depends: libc6 (>= 2.17), nginx-r1.31.7 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.31.7+0.1.0-9~gps1+ubuntu2004+mainline_amd64.deb Size: 10492 SHA512: c480d1be34b5f8383da5c78e8c1d2c72ca1bf8ff67af797cf01dd2b2224bbbee5e1027f3a0833a4a13548307295ce624faf177abfe691a7b93d6b57df7763b7b SHA256: 2c1721acd6ddb9cac70a75be03e565fd81a0770a40f76649ee70534c48d17506 SHA1: 782c5b6d1f96efaffc2775b92c79f523d004d3b1 MD5sum: 35fd2177bfee919847e8eb1f816ccfc3 Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.