How to terminate SSL at ELB and at istio ingressgateway

I set the hostname to the actual FQDN and sent some requests and I couldn’t see any of those hitting the gateway from the debug logs but as soon as I changed the hostname to “*” I immediately saw those requests coming through in the logs. Maybe this is something on the ELB? I wonder if this is because the hostname on ELB and the gateway is the same so the ELB goes into some recursion but no solution so far

This impacts the usage of the gateway though as we cannot use more than one host for the gateway to process. As a workaround for multiple hosts maybe just set the CN to “*” and just apply one gateway resource with all virtual services pointing to this gateway.