iv></div><h5 id=automtls-exclude-port class=question>Does Auto mutual TLS exclude ports set using "excludeInboundPorts" annotation?</h5><div class=answer><p>No. When <code>traffic.sidecar.istio.io/excludeInboundPorts</code> is used on server workloads, Istio still
configures the client Envoy to send mutual TLS by default. To change that, you need to configure
a Destination Rule with mutual TLS mode set to <code>DISABLE</code> to have clients send plain text to those
ports.</p></div><h5 id=mysql-with-mtls cl