I have tried to use tls passthrough with istio controller and k8s ingress , it does not work but with Gateway and VirtualServce it works. ere is the ingress YAML

Networking
1 
kind: Ingress
metadata:
  annotations:
    kubernetes.io/ingress.class: istio
  name: sample-ingress
  namespace: istio-system
spec:
  tls:
  - hosts:
      - example.com
  rules:
  - host: example.com
    http:
      paths:
      - path: /hello
        backend:
          serviceName: sample-service
          servicePort: 433```

I have used 
stioctl version
client version: 1.9.4
control plane version: 1.9.4
data plane version: 1.9.4 (5 proxies)

stioctl proxy-config listeners istio-ingressgateway-795n9.istio-system
ADDRESS PORT MATCH DESTINATION
0.0.0.0 80 ALL Route: http.80
0.0.0.0 15021 ALL Inline Route: /healthz/ready*
0.0.0.0 15090 ALL Inline Route: /stats/prometheus*


here is the error :- on creation of the Ingress, istio is not opening listeners on port 443, so I am getting connection refused