Is it possible to make Traefik determine ClientHost value from the left-most value of XFF instead of right-most value?

Traefik Traefik v2 (latest)
1

I'm doing a testing and I've a setup look like this:
Cloudfront -> NLB -> Traefik -> whoami

With this setup, ClientHost value is 52.46.62.95 which is the Cloudfront IP. Below is the result from whoami

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 840
Content-Type: text/plain; charset=utf-8
Date: Thu, 09 Feb 2023 11:35:28 GMT
Via: 1.1 65964bf10ae7013b0019c15b8c7cb410.cloudfront.net (CloudFront)
X-Amz-Cf-Id: EVTC7YPjyjQn729kxM-k2CjXg2gCAUvJ23s_KY-KwQ_cmCx9uft5Fg==
X-Amz-Cf-Pop: TPE51-C1
X-Cache: Miss from cloudfront

Hostname: whoami-65bd855589-nlv9w
IP: 127.0.0.1
IP: 10.32.2.113
RemoteAddr: 10.32.1.84:45128
GET / HTTP/1.1
Host: whoami.uat-wallet.opn.dev
User-Agent: HTTPie/3.2.1
Accept: */*
Accept-Encoding: gzip, deflate
Cloudfront-Forwarded-Proto: https
Cloudfront-Is-Desktop-Viewer: true
Cloudfront-Is-Mobile-Viewer: false
Cloudfront-Is-Smarttv-Viewer: false
Cloudfront-Is-Tablet-Viewer: false
Cloudfront-Viewer-Asn: 396982
Cloudfront-Viewer-Country: SG
True-Client-Ip: 35.198.236.178
Via: 1.1 65964bf10ae7013b0019c15b8c7cb410.cloudfront.net (CloudFront)
X-Amz-Cf-Id: EVTC7YPjyjQn729kxM-k2CjXg2gCAUvJ23s_KY-KwQ_cmCx9uft5Fg==
X-Forwarded-For: 52.46.62.95
X-Forwarded-Host: whoami.uat-wallet.opn.dev
X-Forwarded-Port: 443
X-Forwarded-Proto: https
X-Forwarded-Server: traefik-internal-service-6446f8cc-8brmr
X-Real-Ip: 52.46.62.95

I talked to AWS support and they said that when exiting NLB, XFF should look like:

X-Forwarded-For: 35.198.236.178, 35.198.236.178, 52.46.62.95

So Traefik take the right-most value to determine as the ClientHost. Which in my case, is not what I want. Is there a way to make Traefik take the left-most value instead which actually represents the real client IP?

2

Neither ClientHost nor 52.46.62.95 are in your pre-formatted text. Can you update to make it easier to understand?

3

Sorry, I took a wrong result. The actual one was already cleared from my console. So I updated X-Forwarded-For and X-Real-Ip values instead. Cuz the main differences are those values.