targetPort: {{ .externalSvcTcpPort }}
  - name: external-svc-tls
    trafficPolicy:
      tunnel:
        targetHost: external.{{ .externalNamespace }}
        targetPort: {{ .externalSvcTlsPort }}
---
{{ if .tlsEnabled }}
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  name: originate-tls-for-outbound-traffic-to-external-forward-proxy
spec:

        port:
          number: 80
  tls:
  - match:
    - port: {{ .externalSvcTlsPort }}
      sniHosts:
      - external.{{ .externalNamespace }}.svc.cluster.local
    route:
    - destination:

        subset: external-svc-tcp
        port:
          number: {{ .forwardProxyPort }}
  tls:
  - match:
    - sniHosts:
      - external.{{ .externalNamespace }}.svc.cluster.local
      port: {{ .externalSvcTlsPort }}
    route:
    - destination:
        host: external-forward-proxy.{{ .externalNamespace }}.svc.cluster.local
        subset: external-svc-tls
        port:

        port:
          number: 80
  tls:
  - match:
    - port: {{ .externalSvcTlsPort }}
      sniHosts:
      - external.{{ .externalNamespace }}.svc.cluster.local
    route:
    - destination:

        subset: originate-tls-for-plain-traffic
        port:
          number: 443
  tls:
  - match:
    - port: {{ .externalSvcTlsPort }}
      sniHosts:
      - external.{{ .externalNamespace }}.svc.cluster.local
    route:
    - destination:

					"forwardProxyPort":              proxyConfig.Port,
					"tlsEnabled":                    proxyConfig.TLSEnabled,
					"externalSvcTcpPort":            ports.TCPForHTTP.ServicePort,
					"externalSvcTlsPort":            ports.HTTPS.ServicePort,
					"EgressGatewayIstioLabel":       i.Settings().EgressGatewayIstioLabel,
					"EgressGatewayServiceName":      i.Settings().EgressGatewayServiceName,