>examples</a> below.</p><h3 id=high-performance>High performance</h3><p>Because of its simple semantics, Istio authorization is enforced on Envoy as a native authorization support. At runtime, the
authorization decision is completely done locally inside an Envoy filter, without dependency to any external module.
This allows Istio authorization to achieve high performance and availability.</p><h3 id=work-withwithout-primary-identities>Work with/without primary identities</h3><p>Like any other RBAC system, Is