This gist documents a tactic which works in a situation:
- Your Software System runs behind an AWS Application Load Balancer (ALB)
- Your Software System uses AWS WAF in conjunction with ALB.
- Your Software System handles Rate Limiting by itself.
- Your Software System Rate Limiting implementation make use of
X-Forwarded-For
header to determine the correct Client Source IPO.