Tiger Xu / Zhonghu Xu

/test release-notes

> Can we add a warning to the validation webhook for this as well? Or alterntively, just automatically set the ciphers? SG, this will bring better UX

@howardjohn

/cherry-pick release-1.16

It is a small option, i think to be consistent with https://github.com/istio/api/blob/master/networking/v1alpha3/destination_rule.pb.go#L1562. We should do

@ramaraochavali You can provide a demo usage to be more clear

can you dump the iptabels

IC, I guess you curl from sample pod, the outbound is still intercepted by sidecar, then from the envoy, it will init tls handshake. And in the server side, no...

We have `--drain-time-s 45 --drain-strategy immediate ` set, so after 45s, the connections can be closed

Any cons do you think?