e="Sidecar connections"><img class=element-to-stretch src=/v1.21/docs/ops/configuration/traffic-management/tls-configuration/sidecar-connections.svg alt="Sidecar proxy network connections"></a></div><figcaption>Sidecar proxy network connections</figcaption></figure><ol><li><p><strong>External inbound traffic</strong>
This is traffic coming from an outside client that is captured by the sidecar.
If the client is inside the mesh, this traffic may be encrypted with Istio mutual TLS.
By default, the sidecar wil