SSH not working with Istio sidecar

I am having an issue with Istio sidecar breaking(?) ssh traffic. I have a service listening on port 22 that works OK without the sidecar. After installing the sidecar and configuring a virtual service I’m getting “kex_exchange_identification: read: Connection reset by peer” errors. Am I missing something obvious?

Thank you.