The perils of the “real” client IP | adam-p
https://adam-p.ca/blog/2022/03/x-forwarded-for/