Package: nginx-module-tcp-fingerprint Version: 1.31.7+0.1.0-9~gps1+ubuntu2404+mainline Architecture: arm64 Maintainer: GetPageSpeed Installed-Size: 156 Depends: libc6 (>= 2.17), nginx-r1.31.7 Breaks: libnginx-mod-http-tcp-fingerprint Replaces: libnginx-mod-http-tcp-fingerprint Provides: libnginx-mod-http-tcp-fingerprint Homepage: https://github.com/studio-vitalyn/ngx-tcp-fingerprint Priority: optional Section: httpd Filename: pool/main/n/nginx-module-tcp-fingerprint/nginx-module-tcp-fingerprint_1.31.7+0.1.0-9~gps1+ubuntu2404+mainline_arm64.deb Size: 10768 SHA512: d13c235971d5a03dbb525cf368d6ebe2b3510055c2e8216f5d413609886e42cd96e299b90e5daa384e31f9992a820860d678f4ed984ff3736e36a6cda998483e SHA256: b8e4995fbddbb8782bea6503c8a584aeeb059cdffc23dd2401fb28f6d6336157 SHA1: c33c2c24f00cf7ca47ee6383c79101a013687e00 MD5sum: 3c23e2b8268daa8e37aeeef10708df10 Description: Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.