@timotheenicolas After reading a lot of documents and do some research with K8s, finally I dicided to follow bellow model.
Traefik -> Ingress Gateway -> Service Mesh -> Terminating Gateway -> DB...
I have to use Traefik as edge proxy because of powerful routing criteria, automatic Let’s Encrypt SSL…
Ingress Gateway will listen to localhost, Traefik will forwad traffic to Ingress Gateway. It will be a bit slower because of adding extra proxy but have much more flexibility.