logger.debug("Client IP from X-Real-IP: clientIp={}, remoteAddr={}", clientIp, remoteAddr);
                }
                return clientIp;
            }
        }

        if (logger.isDebugEnabled()) {
            logger.debug("Client IP from remoteAddr: ip={}", remoteAddr);
        }
        return remoteAddr;
    }

    /**
     * Check if the IP is a trusted proxy.

        // When remoteAddr is not a trusted proxy, headers should be ignored
        final MockletHttpServletRequest request = getMockRequest();
        request.setRemoteAddr("192.168.1.100");
        request.addHeader("X-Forwarded-For", "203.0.113.50");
        request.addHeader("X-Real-IP", "203.0.113.75");
        // Should return remoteAddr, not the spoofed headers

    void setUp() throws UnknownHostException {
        InetAddress localAddr = InetAddress.getByName("192.168.1.100");
        InetAddress remoteAddr = InetAddress.getByName("192.168.1.200");

        localInterface = new NetworkInterfaceInfo(localAddr, 1000);
        remoteInterface = new NetworkInterfaceInfo(remoteAddr, 1000);

        channelInfo = new ChannelInfo("test-channel", mockTransport, localInterface, remoteInterface);
    }

    @Test

        InetAddress localAddr = InetAddress.getByName("192.168.1.10");
        InetAddress remoteAddr = InetAddress.getByName("192.168.1.100");

        NetworkInterfaceInfo localNic = new NetworkInterfaceInfo(localAddr, 1);
        NetworkInterfaceInfo remoteNic = new NetworkInterfaceInfo(remoteAddr, 445);

        // Mock transport doesn't have isConnected, but we can work around it

}

func (driver *ftpDriver) getMinIOClient(ctx *ftp.Context) (*minio.Client, error) {
	tr := http.RoundTripper(globalRemoteFTPClientTransport)
	if host, _, err := net.SplitHostPort(ctx.Sess.RemoteAddr().String()); err == nil {
		tr = forwardForTransport{tr: tr, fwd: host}
	}
	ui, ok := globalIAMSys.GetUser(context.Background(), ctx.Sess.LoginUser())
	if !ok && !globalIAMSys.LDAPConfig.Enabled() {