How would you answer an interview scenario involving external traffic policy and client IP in Ingress?

All API logs show the ingress proxy IP instead of user addresses. Explain how you would diagnose and fix it safely.