<p>Turning the mtls mode to Strict in Istio is giving error : msg=&quot;Error performing http GET at <a href="http://172.xx.xx.xx:xxxx" rel="nofollow noreferrer">http://172.xx.xx.xx:xxxx</a> read: connection reset by peer&quot;
But turning the mtls mode to Permissive works fine.</p>
<p>Is there any solution so that the error can be resolved in Strict mode</p>
<p>Sample of PeerAuthentication:</p>
<pre><code>apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
metadata:
  name: &quot;default&quot;
spec:
  mtls:
    mode: STRICT
</code></pre>

<p>To resolve, ensure that istio-injection is turned on for all pods that are trying to communicate with each other so that they have the istio sidecar proxy running. This is because when the Istio Envoy proxies talk with each other they will automatically encrypt their communication. An Istio sidecar proxy will reject traffic if it doesn't come from another Istio sidecar that it trusts.</p>
<p>Alternatively, you could lower the security by changing your mutual TLS setting in your PeerAuthentication to <code>PERMISSIVE</code>.</p>
