rangeMatcher := &matcher.IPMatcher_IPRangeMatcher{
				Ranges: []*xds.CidrRange{{
					AddressPrefix: cidr.AddressPrefix,
					PrefixLen:     cidr.PrefixLen,
				}},
				OnMatch: match.ToMatcher(portMapper.Matcher),
			}
			ipMatcher.RangeMatchers = append(ipMatcher.RangeMatchers, rangeMatcher)
		}
	}

	{
		// Direct pod access chain.
		cc := inboundChainConfig{