TLS inside pod?

Is there anywhere I can learn how tls and network security is configured behind the envoy proxy and between pod containers