[13:08:17] <Krinkle>	 apergos: Regarding IPUtils, a use more prominent than blocking and check user is XFF, ie who do we attribute requests and edits to, based on the XFF header added on incoming req by the CDN nodes, and based on MW config having a large list of all internal CDN node IP ranges that it "trusts"
[13:08:20] <Krinkle>	 https://phabricator.wikimedia.org/T409899
[13:09:02] <Krinkle>	 https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/+/1204377
[13:11:11] <Krinkle>	 This does also affect CU but also affects the more direct display of public IP edits and eg where Special:Mytalk and Mycontributions redirect to.
[13:14:10] <Krinkle>	 in the very direct sense of which IP mediawiki apaches see as sending the requests, everything comes from 10.x.x.x addresses internally because of the Varnish proxy, so even though thatll be where the connection and REMOTE_ADDR are set to, we must somehow look past that