Running MQ on AKS with Istio, "TLS passthrough sends all traffic on 443 to MQ backend"

[Sumanth-A]

We are setting up MQ on AKS and we use Istio to manage TLS and traffic routing. Since MQ is expecting HTTPS traffic we are not terminating TLS at Istio gateway level and using TLS mode PASSTHROUGH to send traffic as is, for this we also match port 443 of gateway to app service in Virtual Service configuration which now sends all traffic at gateway on 443 including traffic that is meant for other services to MQ service. I understand since Istio is not terminating TLS it won't be able to route traffic. Now other than creating another host and use it for MQ is there another way we can handle this?