ClientIpResolver
Corex\Config\Security\LoginProtection\ClientIpResolver · class · Config layer
Resolves the client’s address. A forwarded header is believed only when the request arrives from a trusted proxy, and then only as far as trusted proxies vouch for it: the answer is the nearest hop that is not itself trusted. Every proxy between the visitor and WordPress therefore has to be in the trusted ranges, or the first one that is not is taken for the client.