Package: nginx-module-tcp-fingerprint Version: 1.30.6+0.1.0-9~gps1+ubuntu2404+stable Architecture: arm64 Maintainer: GetPageSpeed Installed-Size: 156 Depends: libc6 (>= 2.17), nginx-r1.30.6 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.30.6+0.1.0-9~gps1+ubuntu2404+stable_arm64.deb Size: 10756 SHA512: f12a35537499e4b1beb9d2758b1794eefe11a532836a0231ce7358c1a1136fdb2b51bc9292c1aa3661029c4b45000773078b6d1250c6d0624309e49ce53c67cc SHA256: b27a23b35fb184474abc0e02db3df8604b858a125341c669c7761f6978d6ebbc SHA1: 802fdb8d8d43471f0af0fce3bb77ac4bf280fdc7 MD5sum: 9ce40ed438575d4e091d191b9ec4fb3f Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.