Ambient mode now uses in-Pod redirection to redirect traffic between workload pods and ztunnel. The method described in this blog is no longer needed, and this post has been left for historical interest. There are 2 deployment modes for Istio: ambient mode and sidecar mode.