Package: nginx-module-tcp-fingerprint Version: 1.31.7+0.1.0-9~gps1+ubuntu2404+mainline Architecture: amd64 Maintainer: GetPageSpeed Installed-Size: 70 Depends: libc6 (>= 2.17), nginx-r1.31.7 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.31.7+0.1.0-9~gps1+ubuntu2404+mainline_amd64.deb Size: 10504 SHA512: c24bef42709fd99cf209ce94af65a97e594ed46cd9b3e1722c68b716da880d2e6d646490f58f76b046d2e7edacd2163ae1e3ae99b746e4d4acd3a9f2885e8d0e SHA256: bbbf540d0b3f6618bc8b1c85a7bb01305dd6b34d50d8b092f5c7760a25a27497 SHA1: dfb75f7ddcc358759b152afc2dc2748cbeb60680 MD5sum: a0adf6146e501888bd99a27dfdd00e17 Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.