es) to that gateway, using Istio mTLS. On the gateway pod side we build the SNI forwarder with the
<code>EnvoyFilter</code>s, mentioned above, introducing internal Envoy listeners and clusters to make it all work. Finally, we patch the
internal destination of the gateway-implemented TCP proxy to the internal SNI forwarder.</p><p>The end-to-end request flow is shown in the following diagram:</p><figure style=width:90%><div class=wrapper-with-intrinsic-ratio style=padding-bottom:43.73843306600864%><a data-ski