Fetching multiple headers

Then why don't you remove the X-Forwarded-for option from the http profile and insert it in the rule after you retreive the upstream header value. That might allow you to get around this for the time being.