The data-plane proxy component of the Istio service mesh, built on Envoy with additional policy and telemetry extensions.