--- title: Source --- The downstream client of the [Envoy](#envoy) proxy. Within the [service mesh](#service-mesh) a source is typically a [workload](#workload), but the source for ingress traffic may include other clients such as a browser or mobile app.