You put your app behind a tunnel (or any reverse proxy) to test

webhooks. Everything works. Then you notice something odd in your logs:

every single request comes from the same IP address.

Congratulations, you've met the X-Forwarded-For problem.

Enter fullscreen mode