A deep dive into how Istio Ambient mode's HBONE tunneling and traffic redirection are implemented in Envoy configs.
April 14, 2026#envoy
3 posts
- Istio Part 2: Ambient Mode Under the Hood via Envoy Configs
- Investigating Istio AuthorizationPolicy ext_authz in Envoy Config
Analyzing how Istio AuthorizationPolicy's action: CUSTOM works in Envoy config based on actual envoy config dump.
March 10, 2026 - Identifying Client IP in Istio (Proxy Protocol v2)
How to obtain the real client IP in an AWS NLB + Istio Gateway environment where even numTrustedProxies doesn't help, solved with Proxy Protocol v2.
April 2, 2025