wiki/TLS_termination_proxy">TLS termination</a>
where an ingress proxy accepts incoming TLS connections, decrypts the TLS, and passes unencrypted
requests on to internal mesh services.</p>'>TLS origination</span>
for traffic to an external service. Istio will open HTTPS connections to the external service while the original
traffic is HTTP.</p><h2 id=use-case>Use case</h2><p>Consider a legacy application that performs HTTP calls to external sites. Suppose the organization that operates the
application recei