Package: nginx-module-tcp-fingerprint Version: 1.31.7+0.1.0-9~gps1+ubuntu2204+mainline Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 70 Depends: libc6 (>= 2.17), nginx-r1.31.7 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.31.7+0.1.0-9~gps1+ubuntu2204+mainline_amd64.deb Size: 10608 SHA512: 2c890c37c5dee268b9faefded2c72edc53f3cdada1b7cb7e18531e3218fd7e0adccb24b4e34beb9de9f68ec35566fc2c3c086da703ace96e41837101a71a40c4 SHA256: 372dc248c9bfb3f9dd0decf54b1fae30fbd9d4fb3ccbd84f8f99cdde95083c15 SHA1: aeabc0eaadbea383aef4cd9ed60b12b82452d061 MD5sum: 3f335a1d47a7b4f5eb79d5fcbc6ba6fb Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.