Forward proxy vs reverse proxy

One machine in the middle of the same connection. The only thing that changes is which side of the trust boundary it stands on — and therefore whose identity it erases.

drag the scene to orbit

Both hops re-write the sender. That is why X-Forwarded-For exists on the reverse side — and why trusting it from an untrusted hop is a spoofing hole.

Forward proxy

Reverse proxy