Mutual TLS over HTTPS on calls via the ingress gateway

[brettcurtis]

We are in a situation just like this and I'm trying to understand if this still applies to Istio today?

We have a previously secured end to end TLS service on k8s that we are moving to our Istio mesh and I'm trying to decide if I get something like this working (if possible) or just remove TLS from the service and accept the unencrypted traffic from the app to the proxy.

Thanks ahead for any help!