In istio-proxy log shows the socket connection was reject [2022-11-21T12:42:47.825Z] "- - -" 0 UF,URX - - "-" 0 0 10000 - "-" "-" "-" "-" "103.235.46.40:123" PassthroughCluster - 103.235.46.40:123 100.108.44.117:60480
But in the pod the python socket shows connection success <socket.socket fd=3, family=AddressFamily.AF_INET, type=SocketKind.SOCK_STREAM, proto=6, laddr=('100.108.44.117', 60480), raddr=('103.235.46.40', 123)>
And whatever the port is, the socket will shows connect success.
How to configure the istio let the socket has the correct behavior?
I try to set the istio sidecar outboundTrafficPolicy mode to REGISTRY_ONLY. But the socket also shows connect to one hostname which is not configured in seviceentry with any port sucess.