<p>Hello I have got a question about Istio Network Policies . </p>

<p>I created a network policy shown as below and tested it . It works .</p>

<pre><code>apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: api-policy
  namespace: point-1
spec:
  podSelector:
    matchLabels:
      run: api
  ingress:
  - ports:
    - protocol: TCP
      port: 80
    from:
    - podSelector:
        matchLabels:
          istio: ingress
</code></pre>

<p>In my case I want to log all requests all around the internal network , and track which request is blocked, denied according to the policy concerns ? </p>

<p>How Can I log the internal traffic activity in ISTIO . </p>

Ayhan Balik
<p>Istio deploys a envoy sidecar along with your pod and since all traffic goes through the envoy proxy you can get metrics and observability from envoy. You can follow Istio <a href="https://istio.io/docs/tasks/observability/metrics/collecting-metrics/" rel="nofollow noreferrer">docs</a> on how to collect metrics. Also <a href="https://istio.io/docs/tasks/observability/logs/access-log/" rel="nofollow noreferrer">envoy access logs</a> can provide details of all http requests inside your mesh.</p>
