@VisibleForTesting
    boolean connectionIsUsingMutualSSLWithAuthEnforced(Channel ch) {
        boolean is = false;
        SslHandshakeInfo sslHandshakeInfo =
                ch.attr(SslHandshakeInfoHandler.ATTR_SSL_INFO).get();
        if (sslHandshakeInfo != null) {
            if (sslHandshakeInfo.getClientAuthRequirement() == ClientAuth.REQUIRE) {
                is = true;
            }
        }
        return is;
    }
Strip out any X-Forwarded-* headers from inbound http requests if connection is not trusted.
zuul-core/src/main/java/com/netflix/netty/common/proxyprotocol/StripUntrustedProxyHeadersHandler.java