your rate limiter trusts x-forwarded-for. mine did too, until it was measured.
go · 12 min