Temporary, not for merge. 10.40.0.10 is the istio-gateway EXTERNAL LoadBalancer address and is connection-refused from the pod network; this measures the candidates instead of inferring one.