<p>I am new to istio. Istio intercepts all traffic between two services through istio-proxy/envoy. Is it possible to configure istio so that it ignores certain type of traffic</p>

<ul>
<li>when serviceA makes an https call directly to serviceB on a certain port</li>
<li>UDP traffic</li>
</ul>

<p>Thanks</p>

<p>As per Istio <a href="https://github.com/istio/istio/blob/master/install/kubernetes/helm/istio/templates/sidecar-injector-configmap.yaml" rel="nofollow noreferrer">sidecar injection configuration</a> you can exclude ports from Envoy &amp; iptables rules using the <code>includeInboundPorts</code> and <code>excludeInboundPorts</code> annotations.</p>

<p>Example:</p>

<pre><code>apiVersion: apps/v1
kind: Deployment
metadata:
  name: podinfo
  namespace: test
  labels:
    app: podinfo
spec:
  selector:
    matchLabels:
      app: podinfo
  template:
    metadata:
      annotations:
        traffic.sidecar.istio.io/includeInboundPorts: "*"
        traffic.sidecar.istio.io/excludeInboundPorts: "9999,9229"
      labels:
        app: podinfo
    spec:
      containers:
      - name: podinfod
        image: quay.io/stefanprodan/podinfo:1.4.0
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 9898
          name: http
          protocol: TCP
        - containerPort: 9999 # &lt;- excluded port
          protocol: UDP
        - containerPort: 9229 # &lt;- excluded port
          protocol: TCP
        command:
        - ./podinfo
        - --port=9898
        - --level=info
</code></pre>
