The components deployed on the service mesh by default are not exposed outside the cluster. External access to individual services so far has been provided by creating an external load balancer or node port on each service.
An ingress is a collection of rules that allow inbound connections to reach the cluster services. You can create an Ingress Gateway resource to allow external requests through the Istio Ingress Gateway to the back-end services.
Get the EXTERNAL-IP of the Istio Ingress Gateway
kubectl get service istio-ingressgateway -n istio-system