The " allowproxy = true " setting must be explicitly enabled for the server to evaluate X-Forwarded-For headers. Without this setting, all requests are treated as direct client connections.