type PolicyApplier interface {
    // InboundFilterChain returns inbound filter chain(s) for the given endpoint (aka workload) port to
    // enforce the underlying authentication policy.
    InboundFilterChain(endpointPort uint32, sdsUdsPath string, node *model.Proxy,
        listenerProtocol networking.ListenerProtocol) []networking.FilterChain

    // AuthNFilter returns the JWT HTTP filter to enforce the underlying authentication policy.
    // It may return nil, if no JWT validation is needed.
    JwtFilter() *http_conn.HttpFilter

    // AuthNFilter returns the (authn) HTTP filter to enforce the underlying authentication policy.
    // It may return nil, if no authentication is needed.
    AuthNFilter(proxyType model.NodeType, port uint32) *http_conn.HttpFilter
}