y the client.</p></li><li><p><strong>Constrained Inbound Ports</strong>. We now restrict the inbound ports in a pod to the ones declared by the apps running inside that pod.</p></li></ul><h2 id=security>Security</h2><ul><li><p><strong>Introducing Citadel</strong>. We&rsquo;ve finally given a name to our security component. What was formerly known as Istio-Auth or Istio-CA is now called Citadel.</p></li><li><p><strong>Multicluster Support</strong>. We support per-cluster Citadel in multicluster deployments s