When running HAProxy in a docker container, we can only see (and forward) the original client's IP when running the container with the
--net=host option as described here.
Our question: Is this advisable from a security standpoint? Will this allow attackers more easily to exploit HAProxy vulnerabilities? Or is it common practice?