Package: nginx-module-tcp-fingerprint Version: 1.31.7+0.1.0-9~gps1+ubuntu2204+mainline Architecture: arm64 Maintainer: GetPageSpeed Installed-Size: 52 Depends: libc6 (>= 2.17), nginx-r1.31.7 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.31.7+0.1.0-9~gps1+ubuntu2204+mainline_arm64.deb Size: 10568 SHA512: d4c37d5fde00230f3148555216a489a2ddcb18bbfba5c4ccd2cd2869f3285dde3e9bab90e7f42031b77ab8a4f29d5994bc771508b9249604461eedabcf0844a8 SHA256: 09b104efa53d541cbb5627cd07ff470387f73a8225ab610944494cd3d594ae75 SHA1: 28c00445acbf282ac00b4dbb535d0e0d4378d90e MD5sum: 9afd145da61681cf68dd38d15505d9ac Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.