Content-Type, Content-Length, Authorization, Accept, Accept-Encoding, Accept-Language, Cache-Control, ETag, Last-Modified, Expires, Host (or :authority in HTTP/2/3)
Gateways must not modify or remove these unless explicitly instructed (e.g. rewriting Host for routing).