Back to Istio Io

Does Auto mutual TLS exclude ports set using "excludeInboundPorts" annotation?

content/en/about/faq/security/automtls-exclude-port.md

latest298 B
Original Source

No. When traffic.sidecar.istio.io/excludeInboundPorts is used on server workloads, Istio still configures the client Envoy to send mutual TLS by default. To change that, you need to configure a Destination Rule with mutual TLS mode set to DISABLE to have clients send plain text to those ports.