Comment 4 for bug 1684970

As a data point, FWIW, mod_rpaf is available for apache 2.2 on debian-based distros. This should work there as well.

One drawback is that mod_rpaf takes the last X-Forwared-For header value seen by the backend, meaning that if you connect directly to apache and bypass the proxy, you'll be seen as coming from the most recently proxied IP. So, we may want to document that with a "don't do this" note, if we settle on mod_rpaf as the prescribed solution.

Also, thanks, Bill!