io ingress gateway and the ALB is out of scope for this
blog.</div></aside></div><p>Traffic to the services without an Istio sidecar can continue to flow as before directly from the ALB.</p><p>The diagram below exemplifies the described setting. It shows two services in the cluster, <code>service A</code> and <code>service B</code>.
<code>service A</code> has an Istio sidecar injected and requires mutual TLS. <code>service B</code> has no Istio sidecar. <code>service B</code> can
be accessed by clients thro