9443</a></p><h2 id=limitations-for-using-tcpdump-in-pods>Limitations for using Tcpdump in pods</h2><p>Tcpdump doesn&rsquo;t work in the sidecar pod - the container doesn&rsquo;t run as root. However any other container in the same pod will see all the packets, since the
network namespace is shared. <code>iptables</code> will also see the pod-wide configuration.</p><p>Communication between Envoy and the app happens on 127.0.0.1, and is not encrypted.</p><h2 id=cluster-is-not-scaled-down-automatically>Cluster