s the allowed domain names (including wildcards), it TCP proxies the
traffic to the destination, read from the header per connection. This listener is internal to Envoy
(allowing it to restart traffic processing to see the inner SNI value), so that no pods (inside or outside the mesh)
can connect to it directly. This listener is 100% manually configured through EnvoyFilter.</p></li></ul><h2 id=deploy-the-sample>Deploy the sample</h2><p>In order to deploy the sample configuration, start by creating the <code