If you don't have an edge proxy (additional compute) you then accept all requests, or accept that a simple header is telling the truth.