Configure gateway with Simple and Mutual TLS for same host

Security
1

Dears,

Requirement in brief: How to have SIMPLE & MUTUAL TLS for specific endpoints in a virtual service for same host.

I have configured Istio Gateway and VirtualService as described in the Istio which is working fine.
Now we have a requirement that one of the endpoint in a service needs only MTLS validation. But when I changed tls mode to MUTUAL in gateway it is applied for all the endpoints for the host. I created two virtualservice and two gateway configurations for the above need which didn’t worked.
Please help whether this is possible or not.

2

@diemtvu is this possible?

3

I don’t think it’s possible. Anyway, this is about gateway, so networking team may have more insight. + @Costin_Manolache1 @andraxylia