AWS Transfer Family Gets Real Client IP Tracking Behind Load Balancers
AWS Transfer Family now preserves your SFTP clients' actual source IP addresses when you use a Network Load Balancer in front of your VPC endpoint, thanks to Proxy Protocol v2 support. This means your logs, compliance audits, and custom identity providers finally see the real client IP instead of the NLB's private address—available across all AWS regions where Transfer Family operates.
source: [aws/whats-new]