[BUG]AKS Managed Istio Doesn't set x-forward-for

[trhumphries]

Describe the bug
A clear and concise description of what the bug is.
We use AKS Managed Istio and the x-forward-for header isn't getting set
Optional: Set the appropriate GitHub label(s) to indicate the AKS feature or area you believe your bug relates to.

Expected behavior
The client IP should be append as x-forward-for header

Environment (please complete the following information):

• Istio 1.23
• Kubernetes version 1.30.9

[trhumphries]

Note I've tried adding a Traffic Manager in from the load balancer and the XFF it adds is removed

[biefy]

@trhumphries - could you add more details? XFF is added at gateway for HTTP requests. For mesh, client IP is perserved by Azure load balancer before sending to sidecar. Therefore, no need to add XFF.

[microsoft-github-policy-service]

@azure/aks-traffic would you be able to assist?