type PolicyApplier interface {
    // InboundFilterChain returns inbound filter chain(s) for the given endpoint (aka workload) port to
    // enforce the underlying authentication policy.
    InboundFilterChain(endpointPort uint32, sdsUdsPath string, node *model.Proxy,
        listenerProtocol networking.ListenerProtocol, trustDomainAliases []string) []networking.FilterChain

    // AuthNFilter returns the JWT HTTP filter to enforce the underlying authentication policy.
    // It may return nil, if no JWT validation is needed.
    JwtFilter() *http_conn.HttpFilter

    // AuthNFilter returns the (authn) HTTP filter to enforce the underlying authentication policy.
    // It may return nil, if no authentication is needed.
    AuthNFilter(proxyType model.NodeType, port uint32, istioMutualGateway bool) *http_conn.HttpFilter

    // PortLevelSetting returns port level mTLS settings.
    PortLevelSetting() map[uint32]*v1beta1.PeerAuthentication_MutualTLS
}