ingress gateway, please be aware that any external user who has access to the ingress gateway could crash it with a single HTTP request.</p><p>If JWT policy is applied to the sidecar only, please keep in mind it might still be vulnerable. For example, the Istio ingress gateway might forward the JWT token to the sidecar which could be a malformed JWT token that crashes the sidecar.</p><p>A vulnerable Envoy will crash on an HTTP request with a malformed JWT token. When Envoy crashes, all existing connections 