from the <code>veth</code> of the <code>sleep</code> pod where it will be marked and forwarded to the <code>istioout</code> device in the node by following the iptables rules and route rules. The <code>istioout</code> device on node A is a <a href=https://www.rfc-editor.org/rfc/rfc8926.html>Geneve</a> tunnel, and the other end of the tunnel is <code>pistioout</code>, which is inside the ztunnel pod on the same node.</p><p><strong>(4) (5)</strong> When the traffic arrives through the <code>pistioout</code> d