olicy</code> that will block Istio traffic, or otherwise impede Istio functionality, so when using <code>NetworkPolicy</code> and ambient together, there are some things to keep in mind.</p><h2 id=ambient-traffic-overlay-and-kubernetes-networkpolicy>Ambient traffic overlay and Kubernetes NetworkPolicy</h2><p>Once you have added applications to the ambient mesh, ambient&rsquo;s secure L4 overlay will tunnel traffic between your pods over port 15008. Once secured traffic enters the target pod with a destinati