g/networking/virtual-service/>Virtual Service API</a>, <a href=/v1.17/docs/reference/config/telemetry/>L7 telemetry</a>, and <a href=/v1.17/docs/reference/config/security/authorization-policy/>L7 authorization policies</a>.
Namespaces operating in this mode use one or more Envoy-based <strong><em>waypoint proxies</em></strong> to handle L7 processing for workloads in that namespace.
Istio’s control plane configures the ztunnels in the cluster to pass all traffic that requires L7 processing through the way