It can't use the first entry, because each reverse proxy will append to the
header, and so the first one could be anything supplied by the user. This
is also why reverse proxy detection must be opted into to begin with. You
can use https://metacpan.org/pod/Mojolicious::Plugin::ForwardedFor to
speci
I'm currently working on a project using Google's App Engine. I noticed an
issue with the reverse proxy feature, that mojolicious pulls the last entry
from the header (the X-Forwarded-For header is a list of the proxies that
the request traversed). The way google sets it up is that the first entry
