Package: nginx-module-tcp-fingerprint Version: 1.30.6+0.1.0-9~gps1+ubuntu2204+stable Architecture: arm64 Maintainer: GetPageSpeed Installed-Size: 52 Depends: libc6 (>= 2.17), nginx-r1.30.6 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.30.6+0.1.0-9~gps1+ubuntu2204+stable_arm64.deb Size: 10564 SHA512: d1cb09b5f66674d335c8db0e860f260aab63590874462c1a64a6d2ff7d8f2384509236ec8e6b37493896a3f14ff03bd8d46e4d96fb3f85f5db1a45db8edbfc6f SHA256: 059ffc1f839b35716c1e54752d0e9fd6345ec190f1520217dc9e5eea0216ef27 SHA1: 30bf61f9f44eb962c9ef209777749586d4e95482 MD5sum: 9680f1707557cec4eaebe52622988fd8 Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.