realistic scenario you may use a <code>jwt</code> token for this purpose.</p><p>You can update the <code>quota rule</code> by adding a match condition based on the <code>cookie</code>.</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl -n istio-system edit rules quota
</code></pre><pre><code class=language-yaml data-expandlinks=true data-repo=istio>...
spec:
  match: match(request.headers[&#34;cookie&#34;], &#34;session=*&#34;) == false
  actions:
...
</code></pre><div><aside 