Envoy listener default filter chain fallback for unmatched SNI
Envoy listener filter chain selection includes a default filter chain that is used when no named filter chain matches the incoming connection, for example when SNI is absent or does not match a configured filter chain. The precise semantics of the fallback are relevant for preventing accidental public access. The listener configuration allows a default_filte