, but can&rsquo;t satisfy the fourth and
the six requirements because they are not transparent and not Kubernetes-aware.</p><h2 id=advantages-of-istio-egress-traffic-control>Advantages of Istio egress traffic control</h2><p>Istio egress traffic control is <strong>DNS-aware</strong>: you can define policies based on URLs or on wildcard domains like
<code>*.ibm.com</code>. In this sense, it is better than Kubernetes network policies which are not DNS-aware.</p><p>Istio egress traffic control is <strong>transp