n the output when requests are sent from <code>sleep.legacy</code> and <code>sleep.foo</code>
respectively.</p><p>If you can&rsquo;t migrate all your services to Istio (i.e., inject Envoy sidecar in all of them), you will need to continue to use <code>PERMISSIVE</code> mode.
However, when configured with <code>PERMISSIVE</code> mode, no authentication or authorization checks will be performed for plaintext traffic by default.
We recommend you use <a href=/v1.13/docs/tasks/security/authorization/authz-http/>