></li><li><p>Add a <code>DestinationRule</code> to perform mutual TLS origination</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl apply -n istio-system -f - &lt;&lt;EOF
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  name: originate-mtls-for-nginx
spec:
  host: my-nginx.mesh-external.svc.cluster.local
  trafficPolicy:
    loadBalancer:
      simple: ROUND_ROBIN
    portLevelSettings:
    - port:
        number: 443
      tls:
        mode: MUTUAL
