How to install nginx-module-tcp-fingerprint on Ubuntu

Passive TCP SYN fingerprint (p0f-style) and TCP/TLS RTT variables

Vendor: GetPageSpeed https://github.com/studio-vitalyn/ngx-tcp-fingerprint

Availability

Compare package tracks by distribution and architecture. Checkmarks show the architectures available in each repository channel.

Distro Channel amd64 arm64 Version
Ubuntu 26.04 (resolute) Stable 1.30.6+0.1.0
NGINX mainline 1.31.8+0.1.0
Ubuntu 24.04 (noble) Stable 1.30.6+0.1.0
NGINX mainline 1.31.8+0.1.0
Ubuntu 22.04 (jammy) Stable 1.30.6+0.1.0
NGINX mainline 1.31.8+0.1.0
Ubuntu 20.04 (focal) Stable 1.30.6+0.1.0
NGINX mainline 1.31.8+0.1.0

Description

Exposes a passive fingerprint of the client's TCP/IP stack, read from the SYN that opened the connection (TTL, window, MSS, window scale, option layout and header quirks, in the tradition of p0f), as nginx variables, plus the TLS 1.3 handshake round trip next to the kernel's TCP RTT to spot tunnelled clients. A Windows User-Agent arriving on a Linux SYN, an MSS that tells the link, or a TLS RTT well above the TCP one are strong bot and proxy signals; combine them with JA3/JA4 TLS fingerprints for layered bot mitigation. The module only reports: scoring, logging or challenging is up to the configuration. Linux only (TCP_SAVE_SYN); variables are empty on HTTP/3.

Built for Ubuntu.

Install

Stable Ubuntu 20.04, 22.04, 24.04, 26.04

nginx-module-tcp-fingerprint on Ubuntu 20.04 (focal), 22.04 (jammy), 24.04 (noble), 26.04 (resolute)

curl -fsSL https://extras.getpagespeed.com/release-latest.deb -o /tmp/getpagespeed-release.deb
sudo apt-get install -y /tmp/getpagespeed-release.deb
rm /tmp/getpagespeed-release.deb
sudo apt-get update
sudo apt-get install -y nginx-module-tcp-fingerprint
NGINX mainline Ubuntu 20.04, 22.04, 24.04, 26.04

nginx-module-tcp-fingerprint on Ubuntu 20.04 (focal), 22.04 (jammy), 24.04 (noble), 26.04 (resolute)

curl -fsSL https://extras.getpagespeed.com/release-latest.deb -o /tmp/getpagespeed-release.deb
sudo apt-get install -y /tmp/getpagespeed-release.deb
rm /tmp/getpagespeed-release.deb
sudo getpagespeed-extras-channel mainline
sudo apt-get update
sudo apt-get install -y nginx-module-tcp-fingerprint

Package downloads require an active GetPageSpeed subscription — one repository for nginx-module-tcp-fingerprint and thousands more packages for Ubuntu.

Subscribe — from $10/mo

Other releases and channels: use the setup wizard.

Frequently asked questions

How do I install nginx-module-tcp-fingerprint on Ubuntu?

Add the GetPageSpeed repository, then install the nginx-module-tcp-fingerprint package with your system package manager.

Which Ubuntu versions is nginx-module-tcp-fingerprint available for?

nginx-module-tcp-fingerprint is available for Ubuntu 20.04, 22.04, 24.04, 26.04.

Subscribe