ervices with 50,000 pods."></a></div><figcaption></figcaption></figure><p>For the Istio test, we used Istio’s ambient mode, with a <a href=/v1.26/docs/ambient/usage/waypoint/>waypoint proxy</a> in every service namespace, and default install parameters. In order to make our test scenarios similar, we had to turn on a few non-default features in Cilium, including WireGuard encryption, L7 Proxies, and Node Init. We also created a Cilium Network Policy in each namespace, with HTTP path-based rules. In both s