Configures whether to use the direct TCP socket IP address or X-Forwarded-For header for IP allow list validation. When enabled (true), the system validates against the direct socket IP, ignoring proxy headers. When disabled (false, default), X-Forwarded-For headers are considered for proxy scenarios. This setting is not available for cloud/container orchestrators.