2><p>In this section you configure the Istio ingress gateway to perform mutual TLS between external clients and the gateway.
You use the certificates and the keys provided to you for the ingress gateway and the ALB.</p><ol><li><p>Define a <code>Gateway</code> to allow access on port 443 only, with mutual TLS:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl apply -n httptools -f - &lt;&lt;EOF
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: default-in