oxy-cmd/>Debugging Envoy and Pilot</a> for more advice on interpreting this information.</p><h2 id=with-tcpdump>With Tcpdump</h2><p>Tcpdump doesn&rsquo;t work in the sidecar pod - the container doesn&rsquo;t run as root. However any other container in the same pod will see all the packets, since the
network namespace is shared. <code>iptables</code> will also see the pod-wide configuration.</p><p>Communication between Envoy and the app happens on 127.0.0.1, and is not encrypted.</p></article><nav class=page