 should always be <code>502</code> in this case.</p></li><li><p>TCP proxy virtual listener - If the external service port doesn&rsquo;t map to any
HTTP based service ports within the cluster, this listener is invoked and
<code>istio_tcp_connections_closed_total</code> is the metric that will be increased:</p><pre><code class=language-json data-expandlinks=true data-repo=istio>{
  &#34;metric&#34;: {
    &#34;__name__&#34;: &#34;istio_tcp_connections_closed_total&#34;,
    &#34;connection_security_policy&#34