Istio VirtualService Proxy to external HTTPS service?

Hi everyone,

I’m try to figure out the possibility to proxy external service with Istio. I quickly try with virtualservice, serviceentry and destination rule but i’m hitting 503 with nocluster error at the ingress gateway.

Since the mesh is only within the cluster, i imagine i have to extend the mesh right ?

Thanks for advice and help.

Get thing worked when added sni to destinationrule. hope that can help someone else