<p>I am running Istio 1.14 minimal on K8s 1.22</p>
<p>I am testing different outbound connections from inside the mesh and they all fail with errors like:</p>
<pre><code>Execution of class com.microsoft.aad.msal4j.AcquireTokenByAuthorizationGrantSupplier failed.
com.microsoft.aad.msal4j.MsalClientException: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
</code></pre>
<p>or</p>
<pre><code>Cannot send curl request: SSL connect error - trying again
</code></pre>
<p>As a test, I tried a curl from inside the istio-enabled pod:</p>
<pre><code>curl https://www.google.com #this failed
curl http://www.google.com #this worked
</code></pre>
<p>Then, after some reading I created a ServiceEntry:</p>
<pre><code>apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: google
spec:
  hosts:
  - www.google.com
  ports:
  - number: 443
    name: https
    protocol: HTTPS
  resolution: DNS
  location: MESH_EXTERNAL
</code></pre>
<p>This solved the issue and now curl works for both http and https towards google.</p>
<p>My question is how can I extrapolate this in order for all outbound traffic to be allowed? I cannot create Service Entries for all external resources I am trying to connect to.</p>
<p>Sorry for the bad explanation, but I am very new to both K8s and Istio.</p>

Bogdan993
<p>Set <strong>meshConfig.outboundTrafficPolicy.mode</strong> to <strong>ALLOW_ANY</strong> in your Istio installation configuration.</p>
<p><a href="https://istio.io/latest/docs/reference/config/istio.mesh.v1alpha1/#MeshConfig-OutboundTrafficPolicy-Mode" rel="nofollow noreferrer">https://istio.io/latest/docs/reference/config/istio.mesh.v1alpha1/#MeshConfig-OutboundTrafficPolicy-Mode</a></p>
