CHALLENGES WITH IP SPOOFING IN CLOUD ENVIRONMENTS

Summary from the TLDR InfoSec newsletter

IP spoofing is an attack technique where attackers report an incorrect IP address in the X-Forwarded-For header to bypass rate limiting or IP based restrictions. Nearly a third of organizations that use Datadog's product receive X-Forwarded-For headers but 25% of those also receive suspicious X-Forwarded-For headers. To defend against this attack, use trusted vendor headers, add a custom header at the edge, or instruct frameworks to parse the header to the depth appropriate for your environment.