How should external traffic policy and client IP be designed for production in Ingress?

Define trusted proxy hops, configure forwarded-header processing, preserve client IP when required, and test cloud load-balancer behavior.