Hello I was wondering if $remote_addr in a reverse proxy with Nginx is the ip from the TCP connection which is very hard to spoof or is it grabbing it from some header like