External access https not passing through istio-proxy

Using istio 1.4.6 in a kubernetes cluster 1.15

When trying to access from a pod with sidecar istio-proxy to an external service like http://httpbin.org and
creating a service entry and a virtual service with timeout 3 seg everything works fine.

apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: httpbin-ext
spec:
  hosts:
  - httpbin.org
  ports:
  - number: 80
    name: http
    protocol: HTTP
  resolution: DNS
  location: MESH_EXTERNAL
EOF



apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: httpbin-ext
spec:
  hosts:
    - httpbin.org
  http:
  - timeout: 3s
    route:
      - destination:
          host: httpbin.org
        weight: 100
EOF

This is right, like the documentation says.

But if I connect to https instead of http and modify the Virtual service and the service entry for this matter

Service Entry

apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: httpbin-ext
spec:
  hosts:
  - httpbin.org
  ports:
  - number: 443
    name: https
    protocol: HTTPS
  resolution: DNS
  location: MESH_EXTERNAL
EOF

Connection works , but the timeout is not being applied. It does not honor the config of Virtual services , neither timeout nor rate limiting…nothing.

Any ideas?

Working with the egressgateway happens the same.

Additional settings:

outboundTrafficPolicy:
mode: ALLOW_ANY

includeIPRanges: *