Get client’s real IP address on Heroku
From Jacob, Heroku’s Director of Security at the time: The router doesn’t overwrite X-Forwarded-For, but it does guarantee that the real origin will always be the last item in the list. This means that, if you access a Heroku app in the normal way, you will just see your IP address in the X-Forwarded-For header: … Read more