The Kmesh as the proxy of the server works with the envoy client has problem.

[bitcoffeeiux]

When the Kmesh collaborates with the Envoy, the Kmesh can function as the client to bypass the Envoy and manage the Kmesh, which greatly improves the performance. However, when the Kmesh function as the server, a problem occurs. If the client sends messages through the Envoy, the server shorts the Envoy when the Kmesh function exists. However, when the client sends messages, the Envoy may use the mtls encryption. As a result, an error occurs when the server receives messages.

[bitcoffeeiux]

/kind enhancement

[hzxuzhonghu]

By default istio sidecar will initiate tls to upstream with sidecar injected, so there is a problem if kmesh takes charge of the inbound traffic of sidecar