de>*</code> wildcard to match all
services so that it is on par with the mesh-wide authentication policy.</p><pre><code class=language-bash data-expandlinks=true>$ kubectl apply -f - &lt;&lt;EOF
apiVersion: &#34;networking.istio.io/v1alpha3&#34;
kind: &#34;DestinationRule&#34;
metadata:
  name: &#34;default&#34;
  namespace: &#34;istio-system&#34;
spec:
  host: &#34;*.local&#34;
  trafficPolicy:
    tls:
      mode: ISTIO_MUTUAL
EOF
</code></pre><div><aside class="callout tip"><div class=type><svg class="la