 policy to instruct the Istio sidecar proxy to
passthrough calls to unknown services,
this approach completely bypasses the sidecar, essentially disabling all of Istio&rsquo;s features
for the specified IPs. You cannot incrementally add service entries for specific
destinations, as you can with the <code>ALLOW_ANY</code> approach.
Therefore, this configuration approach is only recommended as a last resort
when, for performance or other reasons, external access cannot be configured using the sidecar.</div></