You have successfully deployed Istio, there are sidecars injected in all your services and pods can talk to each other. Now it’s time to start looking outside your service mesh and getting your pods talking to services outside of your cluster. It’s time to introduce ServiceEntries. Defining traffic routing behavior in Istio for external services does not happen automatically. Users need to often create four separate CRD’s to define external traffic routing behavior and that introduces four potential avenues for bugs to get introduced. This talk will cover common pitfalls in egress configurations and debugging techniques for when those calls to external databases start failing.