on port of 15008, the traffic will be proxied back to the original destination port.</p><p>However, <code>NetworkPolicy</code> is enforced on the host, outside the pod. This means that if you have preexisting <code>NetworkPolicy</code> in place that, for example, will deny list inbound traffic to an ambient pod on every port but 443, you will have to add an exception to that <code>NetworkPolicy</code> for port 15008. Sidecar workloads receiving traffic will also need to allow inbound traffic on port 15008 t