<p>It is my understanding that you're gonna have an NLB or ALB in front of your Istio Gateway anyway?</p>

<p>But I am confused because it seems like Istio Gateway does a lot of things ALB does for Layer 7 and even more?</p>

<p>So I read ALB -> Istio Gateway is ok, but isn't that redundant? What about NLB -> ALB -> Istio Gateway, which seems like too much?</p>

<p>It seems like it is best to have NLB -> Istio Gateway to let them handle Layer 4 and Layer 7 respectively like they do best, can anyone enlighten and confirm?</p>

atkayla
<p>Yes, using ALB -> Istio gateway is redundant, as the virtual service takes care of all your custom routing rules (instead of ALB). Using an NLB hostname in front of the Istio gateway is the simplest method &amp; recommended in the docs here: <a href="https://cloud.ibm.com/docs/containers?topic=containers-istio#no-tls" rel="nofollow noreferrer">https://cloud.ibm.com/docs/containers?topic=containers-istio#no-tls</a></p>
