Network Datapath — Architecture & Sequence Flows

Kubernetes · Istio Ambient Mesh — an external request enters via the MetalLB VIP and the Gateway API listener; istio-cni then redirects the flow through ztunnel (HBONE / mTLS) or bypasses it, depending on the namespace label.