Downstream client (browser, mobile app, or another service) calling Envoy (typically to reach another service).