ode>tcpdump</code>, etc.
installed in the default images shipped by Istio can lead to privilege
escalation attacks. These utilities are provided to aid runtime debugging of
packets flowing through the mesh, and users are recommended to use
<a href=/v1.20/docs/ops/configuration/security/harden-docker-images/>hardened versions</a>
of these images in production.</p><p>The report also surfaces a known architectural limitation with any sidecar
proxy-based service mesh implementation which uses <code>iptables</co