[singlow]

But cloudfront already sends that original ip back in a standard header.

[forty]

Yeah and you can ask Cloudfront to add some geodata as well (with headers such as CloudFront-Viewer-Country, etc)