In all cloud environments that I know of, managed load balancers send requests to the backend from multiple IPs, usually two. Moreover these IPs can often change unannounced.

I would like to use the new waitress feature that deals with X-Forwarded-For headers but it's impossible without being able to at least give a network range to trusted_proxy instead of a single IP.