Function peer_is_trusted 

pub fn peer_is_trusted(trusted: &[String], peer: IpAddr) -> bool

Whether peer falls inside any configured trusted-proxy entry. Unparseable entries cannot occur in a validated config; they are conservatively treated as non-matching here (validation rejects the whole config before the dataplane ever sees it).