t.auth.claims</code></td><td>Claims from the origin JWT. The actual claim name is surrounded by brackets</td><td>HTTP only</td><td><code>key: request.auth.claims[iss]</code><br><code>values: ["*@foo.com"]</code></td></tr><tr><td><code>destination.ip</code></td><td>Destination workload instance IP address, supports single IP or CIDR</td><td>HTTP and TCP</td><td><code>key: destination.ip</code><br><code>values: ["10.1.2.3", "10.2.0.0/16"]</code></td></tr><tr><td><code>destination.port</code></td><td>The recip