></div><h2 id=changes>Changes</h2><ul><li><p><strong>Improved</strong> TLS configuration on sidecar server-side inbound paths to enforce TLS 2.0 version along with recommended cipher suites. This is disabled by default and can enabled by setting the environment variable <code>PILOT_SIDECAR_ENABLE_INBOUND_TLS_V2</code> to true.</p></li><li><p><strong>Added</strong> ability to configure domain suffix for multicluster installation. (<a href=https://github.com/istio/istio/issues/27300>Issue #27300</a>)</p></li>