Deployment Topology Impacts Rate-Limiting and Trust Proxy Settings

Rate-limiting based on client IP fails when requests pass through multiple proxies, as the backend sees the proxy's IP instead. Developers must configure 'trust proxy' in Express to skip known proxies and read the real client IP from X-Forwarded-For. The setting can be numeric, 'uniquelocal', or an IP array, depending on network topology.