i guess this is meant for when no caching is active. we could explain in the doc how to actually have the original ip in the request and not the varnish ip => http://symfony.com/doc/current/components/http_foundation/trusting_proxies.html