Package: nginx-module-tcp-fingerprint Version: 1.30.6+0.1.0-9~gps1+ubuntu2204+stable Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 70 Depends: libc6 (>= 2.17), nginx-r1.30.6 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.30.6+0.1.0-9~gps1+ubuntu2204+stable_amd64.deb Size: 10600 SHA512: 2a7c1cbd35a9028b3e429de16c58cc571a7b55964186fbe8f322c33c4310f49cf76ca1b2612caa274a2e79d39c4ed8526af71e3d8faacd154ba0328424857e37 SHA256: dbf47c0a7ec267563bf92d8da5b9ca686ffb6b57d4aa4b5e8f6fac495465ee85 SHA1: fa22fdbd4d3088ecfe5b796cd3e4c3ad1bf8809a MD5sum: 9df4e21998a7b927d698766f3d67d497 Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.