Unable to ingress a service that's outside the smesh

We have Prometheus being run by the operator where we are trying to use Istio to ingress the traffic to it. We have set tls mode to DISABLED and we are getting

upstream connect error or disconnect/reset before headers

What can be the error here?

We see this usually when the app itself is not responding properly. Have you checked if your prometheus is running fine (maybe via nodeport or ClusterIP?)

Yes I have tested access directly to the internal service on prometheus-proxied:80 and that answers with a 302 so that’s correct since it should redirect if now authed.