出口TLS起源适用于一个域，但不适用于其他域

Question

我想对外部服务进行TLS起源，我正在遵循Istio的documentation进行配置。

apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: edition-cnn-com
spec:
  hosts:
  - edition.cnn.com
  ports:
  - number: 80
name: http-port
protocol: HTTP
  - number: 443
name: https-port-for-tls-origination
protocol: HTTPS
  resolution: DNS
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: edition-cnn-com
spec:
  hosts:
  - edition.cnn.com
  http:
  - match:
- port: 80
route:
- destination:
    host: edition.cnn.com
    subset: tls-origination
    port:
      number: 443
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  name: edition-cnn-com
spec:
  host: edition.cnn.com
  subsets:
  - name: tls-origination
trafficPolicy:
  loadBalancer:
    simple: ROUND_ROBIN
  portLevelSettings:
  - port:
      number: 443
    tls:
      mode: SIMPLE # initiates HTTPS when accessing edition.cnn.com

以上配置适用于edition.cnn.com域，但是如果我将此域更改为httpbin.stackbox.xyz之类的内容，它将无法使用。为什么它只适用于一个域而不适用于其他域？

注意，可以使用HTTPS从外部进行访问

curl -i https://httpbin.stackbox.xyz/ip