cons.svg#dropdown-arrow"/></svg></div></div><div class=faq-block-answer><p>If you installed Istio with <code>values.global.proxy.privileged=true</code>, you can use <code>tcpdump</code> to determine encryption status. Also in Kubernetes 1.23 and later, as an alternative to installing Istio as privileged, you can use <code>kubectl debug</code> to run <code>tcpdump</code> in an <a href=https://kubernetes.io/docs/tasks/debug/debug-application/debug-running-pod/#ephemeral-container>ephemeral container</a>. See 