 - &lt;&lt;EOF
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: ingress-policy
  namespace: istio-system
spec:
  selector:
    matchLabels:
      app: istio-ingressgateway
  action: ALLOW
  rules:
  - from:
    - source:
       ipBlocks: [&#34;1.2.3.4&#34;, &#34;5.6.7.0/24&#34;]
EOF
</code></pre></li><li><p>Verify that a request to the ingress gateway is denied:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ curl $INGRESS_HOST/headers -s -o /dev/nu