for i := 1; i <= bm.time; i++ {
			// these specific non-wildcard hosts are crafted this way to never match the needle,
			// this should replicate real-world scenarios of mixed specific and wildcard hosts
			specific := host.Name(strconv.Itoa(i) + "." + bm.baseHost)
			// generate correct wildcard hosts, one of these will match
			wildcard := host.Name("*." + bm.baseHost + "." + strconv.Itoa(i))

      "servicePort": "servicePortValue",
      "resource": {
        "apiGroup": "apiGroupValue",
        "kind": "kindValue",
        "name": "nameValue"
      }
    },
    "tls": [
      {
        "hosts": [
          "hostsValue"
        ],
        "secretName": "secretNameValue"
      }
    ],
    "rules": [
      {
        "host": "hostValue",
        "http": {
          "paths": [
            {

# Set up a Service associated with our proxy, which will run as 1.1.1.1 IP
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: proxy-service-instance
spec:
  hosts:
  - example.com
  ports:
  - number: 80
    name: http
    protocol: HTTP
  - number: 7070
    name: tcp
    protocol: TCP
  - number: 443
    name: https
    protocol: HTTPS
  - number: 9090
    name: auto
    protocol: ""

kind: Gateway
metadata:
  name: httpbin-gateway
spec:
  selector:
    myapp: private-ingressgateway
  servers:
  - port:
      number: 8004
      name: http2
      protocol: HTTP
    hosts:
    - "*"
---
apiVersion: v1
kind: Pod
metadata:
  labels:
    myapp: private-ingressgateway
  name: my-ingressgateway-1234
spec:
  containers:
    - args:
      name: istio-proxy
---

kind: Gateway
metadata:
  name: httpbin-gateway
spec:
  selector:
    myapp: private-ingressgateway
  servers:
  - port:
      number: 80
      name: http2
      protocol: HTTP
    hosts:
    - "*"
---
apiVersion: v1
kind: Pod
metadata:
  labels:
    myapp: private-ingressgateway
  name: my-ingressgateway-1234
spec:
  containers:
    - args:
      name: istio-proxy
---

// license that can be found in the LICENSE file.

package net

import (
	"internal/syscall/windows"
	"syscall"
)

var (
	hostsFilePath = windows.GetSystemDirectory() + "/Drivers/etc/hosts"

	// Placeholders for socket system calls.
	wsaSocketFunc func(int32, int32, int32, *syscall.WSAProtocolInfo, uint32, uint32) (syscall.Handle, error) = windows.WSASocket

    port:
      name: tls
      number: 8080
      protocol: TCP
  egress:
  - hosts:
    - "*/*"
  workloadSelector:
    labels:
      app: foo
---`
	instancePorts := `
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: se
spec:
  hosts:
  - foo.bar
  endpoints:
  - address: 1.1.1.1
    labels:
      app: foo

          service:
            name: nameValue
            port:
              name: nameValue
              number: 2
        path: pathValue
        pathType: pathTypeValue
  tls:
  - hosts:
    - hostsValue
    secretName: secretNameValue
status:
  loadBalancer:
    ingress:
    - hostname: hostnameValue
      ip: ipValue
      ports:
      - error: errorValue
        port: 1

			}
		}

		// Check for duplicate hosts
		// Duplicates include literal duplicates as well as wildcard duplicates
		// E.g., *.foo.com, and *.com are duplicates in the same virtual service
		if allHostsValid {
			for i := 0; i < len(virtualService.Hosts); i++ {
				hostI := host.Name(virtualService.Hosts[i])
				for j := i + 1; j < len(virtualService.Hosts); j++ {
					hostJ := host.Name(virtualService.Hosts[j])

	client := kube.NewFakeClient()

	// Configure the environment with cluster-local hosts.
	m := meshconfig.MeshConfig{
		ServiceSettings: []*meshconfig.MeshConfig_ServiceSettings{
			{
				Settings: &meshconfig.MeshConfig_ServiceSettings_Settings{
					ClusterLocal: true,
				},
				Hosts: []string{"*.unexportable-ns.svc.cluster.local", "unexportable-svc.*.svc.cluster.local"},
			},
		},
	}