to-stretch src=/v1.8/blog/2019/egress-traffic-control-in-istio-part-2/SecurityArchitectureWithL3Firewalls.svg alt="Istio Security Architecture with Egress Gateway and L3 Firewall"></a></div><figcaption>Istio Security Architecture with Egress Gateway and L3 Firewall</figcaption></figure><p>You can configure the L3 firewall trivially to only allow incoming traffic through the Istio ingress gateway and
only allow outgoing traffic through the Istio egress gateway. The Istio proxies of the gateways enforce
polic