diff --git a/src/Api/project.json b/src/Api/project.json
index 6f6717d4a8..e552e64840 100644
--- a/src/Api/project.json
+++ b/src/Api/project.json
@@ -21,7 +21,7 @@
     "Microsoft.Extensions.Options.ConfigurationExtensions": "1.0.0",
     "Loggr.Extensions.Logging": "1.0.0",
     "Microsoft.ApplicationInsights.AspNetCore": "1.0.0",
-    "AspNetCoreRateLimit": "1.0.2"
+    "AspNetCoreRateLimit": "1.0.5"
   },
 
   "tools": {
diff --git a/src/Api/settings.json b/src/Api/settings.json
index 7ab0151bbc..23e5683f04 100644
--- a/src/Api/settings.json
+++ b/src/Api/settings.json
@@ -31,7 +31,7 @@
   "IpRateLimitOptions": {
     "EnableEndpointRateLimiting": true,
     "StackBlockedRequests": false,
-    "RealIpHeader": "X-Forwarded-For",
+    "RealIpHeader": "CF-Connecting-IP",
     "ClientIdHeader": "X-ClientId",
     "HttpStatusCode": 429,
     "IpWhitelist": [],