Block a user
Restrict egress to certain namespaces
Istio proxy-sidecar Endpoints
Restrict egress to certain namespaces
SSL termination from the sidecar itself
Single service, various pods with different ports
Gateway
host
based routing
Restrict namespaces targetting