Redirect external HTTPS traffic to internal service

Hi,

We have the following pieces flow:

URL app1 → AWS NLB 443 → Istio ingress gateway → virtual service (app1) → service1 (app1) → app1
URL app2 → AWS NLB 443 → Istio ingress gateway → virtual service (app2) → service2 (app2) → app2

When we access app1 or app2 through NLB, it is OK, but we want that when app1 curls https://app2, Istio redirect traffic to http://app2.default.svc.cluster.local. This will make that internal traffic does not go to NLB and for app1 will be transparent the URL of app2.

It is possible to get it with Istio?

Regards.