ations. Ambient mode is expected to reach Alpha quality in Istio 1.18.</p><h2 id=conclusion>Conclusion</h2><p>With all these layers to network security at Splunk Cloud, it is helpful to take a step back and examine the life of a request as it traverses these layers. When a client sends a request, they first connect to the NLB, which will be allowed or blocked by the <code>VPC ACLs</code>. The NLB then proxies the request to one of the ingress nodes, which terminates TLS and inspects the request at Layer 7, 