Your Containers Now See the Real Visitor IP
The originating client address is preserved all the way to your container, so rate limiting, geolocation and IP allowlists work on real addresses.
What's changed
- X-Forwarded-For now carries the real client IP rather than an internal address
- Rate limiting and abuse controls inside your app operate on genuine addresses
- Geolocation and analytics see the visitor rather than our load balancer
- Works for both IPv4 and IPv6 visitors
- Read the chain from the right and take the first public address — the docs show the exact snippet