coates’s Twitter Archive—№ 17,881

Don’t do this: serverfault.com/questions/487463/nginx-rate-limiting-with-x-forwarded-for-header/487473#487473 ; X-Forwarded-For is arbitrarily assigned by the client, and then appended to. Very easy to bypass.