How should external traffic policy and client IP be designed for production in Ingress?

Define trusted proxy hops, configure forwarded-header processing, preserve client IP when required, and test cloud load-balancer behavior. The implementation should be justified by measurable requirements, kept as simple as the problem allows, and validated with realistic tests, telemetry, failure handling, and documented tradeoffs.