Meaning of DestinationRule TLSSettings.TLSmode "DISABLE"?

The DR TLSSettings.TLSmode option DISABLE is documented as “Do not setup a TLS connection to the upstream endpoint.”

I don’t know if it means

  • “disable traffic to the service” or
  • “Istio is configured for TLS, but disable that and talk plain HTTP”.

It means when DISABLE is set, envoy will not initiate tls connection, just plain text.