Client-IP behind Web Application Firewall (WAF)

Nowadays it is common to use a Web Application Firewall (WAF) upstream the Webserver. In this case some security features like Hacker IP are not usable.
It should be possible to get the real client-ip within the use of a WAF.

We provide the X-FORWARDED-FOR and X-REAL-IP Header for this case.