Function clientIP

internal/agent/api.go:1588–1590

clientIP keys the per-IP limiters on the same trusted source as the DCR limiter: CF-Connecting-IP only, never the client-controlled X-Forwarded-For (see dcrSourceIP for the full rationale and the origin-firewall caveat). Delegating keeps every per-IP surface identical and impossible to drift apart.

(r *http.Request)

// origin-firewall caveat). Delegating keeps every per-IP surface
// identical and impossible to drift apart.
func clientIP(r *http.Request) string {
	return dcrSourceIP(r)
}