How would you answer an interview scenario involving external traffic policy and client IP in Ingress?

For an interview scenario involving external traffic policy and client IP, I would first clarify the business goal, scale, constraints, and the failure or quality attribute the interviewer wants to explore. Kubernetes service and ingress networking choices affect whether original client IP information is preserved or replaced by proxies. In this scenario, all API logs show the ingress proxy IP instead of user addresses. Explain how you would diagnose and fix it safely. For production, define trusted proxy hops, configure forwarded-header processing, preserve client IP when required, and test cloud load-balancer behavior. I would then explain the main alternatives and tradeoffs, identify likely failure modes, and describe how I would validate the solution through testing, observability, security controls, and recovery or rollback planning.