gging of
packets flowing through the mesh, and users are recommended to use
<a href=/v1.26/docs/ops/configuration/security/harden-docker-images/>hardened versions</a>
of these images in production.</p><p>The report also surfaces a known architectural limitation with any sidecar
proxy-based service mesh implementation which uses <code>iptables</code> for intercepting
traffic. This mechanism is susceptible to
<a href=/v1.26/docs/ops/best-practices/security/#understand-traffic-capture-limitations>sidecar proxy