if cMatch.PortNumber != 0 && int(cMatch.PortNumber) != port {
		return false
	}
	return true
}

func hostContains(hosts []host.Name, service host.Name) bool {
	for _, h := range hosts {
		if h == service {
			return true
		}
	}
	return false

  gateways:
  - istio-system/gateway-istio-autogenerated-k8s-gateway-foobar
  hosts:
  - '*'
  http:
  - name: default.bind-all.0
    route:
    - destination:
        host: httpbin.default.svc.domain.suffix
        port:
          number: 85
  - name: istio-system.same-namespace-valid.0
    route:
    - destination:
        host: httpbin.istio-system.svc.domain.suffix
        port:
          number: 81

			},
			services:  []*Service{serviceA8000},
			expected:  []*Service{serviceA8000},
			namespace: "a",
		},
		{
			name: "fall back to wildcard namespace",
			listenerHosts: map[string]hostClassification{
				wildcardNamespace: {allHosts: []host.Name{"host"}, exactHosts: sets.New[host.Name]("host")},
				"a":               {allHosts: []host.Name{"alt"}, exactHosts: sets.New[host.Name]("alt")},

            hosts: ["rule[0]-to[0]-host[1]", "rule[0]-to[0]-host[2]"]
            ports: ["9001", "9002"]
            paths: ["rule[0]-to[0]-path[1]", "rule[0]-to[0]-path[2]"]
        - operation:
            methods: ["rule[0]-to[1]-method[1]", "rule[0]-to[1]-method[2]"]
            hosts: ["rule[0]-to[1]-host[1]", "rule[0]-to[1]-host[2]"]
            ports: ["9011", "9012"]

spec:
  selector:
    istio.io/benchmark: "true"
  servers:
  - hosts:
    - '*'
    port:
      name: http
      number: 80
      protocol: HTTP
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: knative-local-gateway
  namespace: knative-serving
spec:
  selector:
    istio.io/benchmark: "true"
  servers:
  - hosts:
    - '*'
    port:
      name: http
      number: 8081

kind: VirtualService
metadata:
  name: ratings-01
  namespace: default
spec:
  hosts:
  - ratings
  http:
  - route:
    - destination:
        host: ratings
        subset: v1
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  name: ratings
  namespace: default
spec:
  host: ratings
  subsets:
  - name: v1
    labels:

  rules:
    - to: # only allow /allow for company.com
        - operation:
            paths: [ "/allow" ]
            hosts: [ "www.company.com" ]
    - to: # checks only a call 443 over istio mutual without JWT
        - operation:
            hosts: [ "{{ .Allowed.ServiceName }}-{{ .Allowed.NamespaceName }}-only.com" ]
      from:
        - source:

spec:
  gateways:
  - gateway-conformance-infra/isolation-istio-autogenerated-k8s-gateway-abc-foo-example-com
  hosts:
  - bar.com
  http:
  - match:
    - uri:
        prefix: /abc-foo-example-com
    name: gateway-conformance-infra.attaches-to-abc-foo-example-com-with-hostname-intersection.0
    route:
    - destination:
        host: infra-backend-v1.gateway-conformance-infra.svc.domain.suffix
        port:
          number: 8080
---

metadata:
  name: websocket
  namespace: testns
spec:
  host: websocket.test.istio.io
  subsets:
    - name: v1
      labels:
        version: v1


---

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: websocket-route
  namespace: testns
spec:
  hosts:
    - websocket.test.istio.io
  http:
    - match:
      - headers:
          testwebsocket:

		},
		{
			host.Names{"foo.com"},
			host.Names{},
			host.Names{},
		},
		{
			host.Names{},
			host.Names{"bar.com"},
			host.Names{},
		},
		{
			host.Names{"*", "foo.com"},
			host.Names{"foo.com"},
			host.Names{"foo.com"},
		},
		{
			host.Names{"*"},
			host.Names{"foo.com"},
			host.Names{"foo.com"},
		},
		{
			host.Names{"foo.com"},
			host.Names{"Foo.com"},
			host.Names{},
		},