Package: nginx-module-tcp-fingerprint Version: 1.31.7+0.1.0-9~gps1+ubuntu2004+mainline Architecture: arm64 Maintainer: GetPageSpeed Installed-Size: 52 Depends: libc6 (>= 2.17), nginx-r1.31.7 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.31.7+0.1.0-9~gps1+ubuntu2004+mainline_arm64.deb Size: 10476 SHA512: 2d3ba152c39c8a94dedbf860bf8f0383beba0f528b3d38a469578967c79c8a816045fb24a7196f07f3c5a18fa161852944b0648eb592d0425ea4a6eb86451a78 SHA256: 6c54cb9d2f3034b0a1af73eb1d5079255e242e8f3728edb45ffcdfdb1800c229 SHA1: 85833901e4a3e8bd601bab93ab567d842394c6af MD5sum: 3829eacb7439557bacdbabb3df54621b Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.