The wikipedia description of the HTTP header X-Forwarded-For is: X-Forwarded-For: client1, proxy1, proxy2, ... The nginx documentation for the directive real_ip_header reads, in part: This directive sets the name of the header used for transferring the replacement IP address. In case of X-Forwarded-For, this module uses the last ip in the X-Forwarded-For header for replacement. [Emphasis mine] The
![nginx real_ip_header and X-Forwarded-For seems wrong](https://cdn-ak-scissors.b.st-hatena.com/image/square/1d7824625a3ecbc3a39062b14aaa9db8a44aa022/height=288;version=1;width=512/https%3A%2F%2Fcdn.sstatic.net%2FSites%2Fserverfault%2FImg%2Fapple-touch-icon%402.png%3Fv%3D9b1f48ae296b)