diff --git a/routing/v1alpha2/gateway.pb.go b/routing/v1alpha2/gateway.pb.go
index 3c576807c5d..a52d22660ac 100644
--- a/routing/v1alpha2/gateway.pb.go
+++ b/routing/v1alpha2/gateway.pb.go
@@ -145,6 +145,7 @@ func (Server_TLSOptions_TLSmode) EnumDescriptor() ([]byte, []int) {
 //       - eu.bookinfo.com
 //       gateways:
 //       - my-gateway
+//       - mesh # applies to all the sidecars in the mesh
 //       http:
 //       - match:
 //         - headers:
@@ -168,8 +169,10 @@ func (Server_TLSOptions_TLSmode) EnumDescriptor() ([]byte, []int) {
 //             name: reviews.qa
 //           weight: 20
 //
-// The following routing rule forwards traffic arriving at (external)
-// port 2379 from 172.17.16.* subnet to internal Mongo server on port 5555.
+// The following routing rule forwards traffic arriving at (external) port
+// 2379 from 172.17.16.0/24 subnet to internal Mongo server on port 5555. This
+// rule is not applicable internally in the mesh as the gateway list omits
+// the reserved name "mesh".
 //
 //     apiVersion: config.istio.io/v1alpha2
 //     kind: RouteRule
@@ -189,26 +192,6 @@ func (Server_TLSOptions_TLSmode) EnumDescriptor() ([]byte, []int) {
 //         - destination:
 //             name: mongo.prod
 //
-// By default, if there is no wildcard, HTTP requests for unknown domains
-// or requests that have no matching route rule will respond with a 404. If
-// a specific default behavior is desired at the ingress, add a route rule
-// with a wildcard host and the desired backend. For example, the following
-// wildcard routing rule routes all traffic to homepage.prod by default.
-//
-//     apiVersion: config.istio.io/v1alpha2
-//     kind: RouteRule
-//     metadata:
-//       name: default-ingress
-//     spec:
-//       hosts:
-//       - *
-//       gateways:
-//       - my-gateway
-//       http:
-//       - route:
-//         - destination:
-//             name: homepage.prod
-//
 type Gateway struct {
 	// REQUIRED: A list of server specifications.
 	Servers []*Server `protobuf:"bytes,1,rep,name=servers" json:"servers,omitempty"`
diff --git a/routing/v1alpha2/gateway.proto b/routing/v1alpha2/gateway.proto
index 74ccfc1ed51..130eb886972 100644
--- a/routing/v1alpha2/gateway.proto
+++ b/routing/v1alpha2/gateway.proto
@@ -86,6 +86,7 @@ package istio.routing.v1alpha2;
 //       - eu.bookinfo.com
 //       gateways:
 //       - my-gateway
+//       - mesh # applies to all the sidecars in the mesh
 //       http:
 //       - match:
 //         - headers:
@@ -109,8 +110,10 @@ package istio.routing.v1alpha2;
 //             name: reviews.qa
 //           weight: 20
 //
-// The following routing rule forwards traffic arriving at (external)
-// port 2379 from 172.17.16.* subnet to internal Mongo server on port 5555.
+// The following routing rule forwards traffic arriving at (external) port
+// 2379 from 172.17.16.0/24 subnet to internal Mongo server on port 5555. This
+// rule is not applicable internally in the mesh as the gateway list omits
+// the reserved name "mesh".
 //
 //     apiVersion: config.istio.io/v1alpha2
 //     kind: RouteRule
@@ -130,26 +133,6 @@ package istio.routing.v1alpha2;
 //         - destination:
 //             name: mongo.prod
 //
-// By default, if there is no wildcard, HTTP requests for unknown domains
-// or requests that have no matching route rule will respond with a 404. If
-// a specific default behavior is desired at the ingress, add a route rule
-// with a wildcard host and the desired backend. For example, the following
-// wildcard routing rule routes all traffic to homepage.prod by default.
-//
-//     apiVersion: config.istio.io/v1alpha2
-//     kind: RouteRule
-//     metadata:
-//       name: default-ingress
-//     spec:
-//       hosts:
-//       - *
-//       gateways:
-//       - my-gateway
-//       http:
-//       - route:
-//         - destination:
-//             name: homepage.prod
-//
 message Gateway {
   // REQUIRED: A list of server specifications.
   repeated Server servers = 1;
diff --git a/routing/v1alpha2/route_rule.pb.go b/routing/v1alpha2/route_rule.pb.go
index d0dea4f1abd..c98885f1e56 100644
--- a/routing/v1alpha2/route_rule.pb.go
+++ b/routing/v1alpha2/route_rule.pb.go
@@ -57,7 +57,9 @@ var _ = math.Inf
 // For example, the following rule routes all traffic by default to pods of
 // reviews service with label "version: v1". In addition, HTTP requests
 // containing for /wpcatalog/, /consumercatalog/ url prefixes will be
-// rewritten to /api/v2 and send to pods with label version: v2.
+// rewritten to /api/v2 and send to pods with label version: v2. The rule
+// will be applied at the gateway named "bookinfo" as well as at all the
+// sidecars in the mesh (indicated by the reserved gateway name "mesh").
 //
 //     apiVersion: config.istio.io/v1alpha2
 //     kind: RouteRule
@@ -66,6 +68,9 @@ var _ = math.Inf
 //     spec:
 //       hosts:
 //       - reviews
+//       gateways: #if omitted, defaults to "sidecars"
+//       - bookinfo
+//       - mesh
 //       http:
 //       - match:
 //         - uri:
@@ -111,13 +116,16 @@ type RouteRule struct {
 	// case of TCP services, the plain service name or an IP address with
 	// CIDR prefix can be used.
 	Hosts []string `protobuf:"bytes,1,rep,name=hosts" json:"hosts,omitempty"`
-	// The names of gateways that should apply these routes. A single route
-	// rule could be used for sources inside the mesh as well as one or more
-	// gateways. The selection condition imposed by this field is
-	// independant of the sourceLabels match condition in HTTP/TCP routes. It
-	// is possible to define a route rule that applies to both the gateway
-	// and a specific internal workload by specifying gateways as well as the
-	// source match condition in HTTP/TCP routes.
+	// The names of gateways and sidecars that should apply these routes. A
+	// single route rule is used for sidecars inside the mesh as well
+	// as for one or more gateways. The selection condition imposed by this field
+	// can be overridden using the source field in the match conditions of HTTP/TCP
+	// routes. The reserved word "mesh" is used to imply all the sidecars in
+	// the mesh. When this field is omitted, the default gateway ("mesh")
+	// will be used, which would apply the rule to all sidecars in the
+	// mesh. If a list of gateway names is provided, the rule will apply
+	// only to the gateways. To apply a rule to both gateways and sidecars,
+	// specify "mesh" as one of the gateway names.
 	Gateways []string `protobuf:"bytes,2,rep,name=gateways" json:"gateways,omitempty"`
 	// A list of routes for HTTP traffic.
 	Http []*HTTPRoute `protobuf:"bytes,3,rep,name=http" json:"http,omitempty"`
@@ -367,7 +375,7 @@ func (m *HTTPRoute) GetAppendHeaders() map[string]string {
 //       tcp:
 //       - match:
 //         - port:
-//             name: Mongo #only applies to ports named Mongo
+//             name: Mongo # only applies to ports named Mongo
 //           sourceSubnet: "172.17.16.0/24"
 //         route:
 //         - destination:
@@ -409,7 +417,7 @@ func (m *TCPRoute) GetRoute() []*DestinationWeight {
 // route rule to be applied to the HTTP request. For example, the following
 // route rule restricts the rule to match only requests where the URL path
 // starts with /ratings/v2/ and the request contains a "cookie" with value
-// "user=jason",
+// "user=jason".
 //
 //     apiVersion: config.istio.io/v1alpha2
 //     kind: RouteRule
@@ -494,8 +502,14 @@ type HTTPMatchRequest struct {
 	// same protocol the names should be of the form <protocol-name>-<DNS label>.
 	Port *PortSelector `protobuf:"bytes,6,opt,name=port" json:"port,omitempty"`
 	// One or more labels that constrain the applicability of a rule to
-	// sources with the given labels.
+	// workloads with the given labels. If the route rule has a list of
+	// gateways specified at the top, it should include the reserved gateway
+	// "mesh" in order for this field to be applicable.
 	SourceLabels map[string]string `protobuf:"bytes,7,rep,name=source_labels,json=sourceLabels" json:"source_labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// Names of gateways where the rule should be applied to. Gateway names
+	// at the top of the rule (if any) are overridden. The gateway match is
+	// independent of sourceLabels.
+	Gateways []string `protobuf:"bytes,8,rep,name=gateways" json:"gateways,omitempty"`
 }
 
 func (m *HTTPMatchRequest) Reset()                    { *m = HTTPMatchRequest{} }
@@ -552,6 +566,13 @@ func (m *HTTPMatchRequest) GetSourceLabels() map[string]string {
 	return nil
 }
 
+func (m *HTTPMatchRequest) GetGateways() []string {
+	if m != nil {
+		return m.Gateways
+	}
+	return nil
+}
+
 // Each routing rule is associated with one or more service versions (see
 // glossary in beginning of document). Weights associated with the version
 // determine the proportion of traffic it receives. For example, the
@@ -630,8 +651,14 @@ type L4MatchAttributes struct {
 	// form or just a.b.c.d
 	SourceSubnet string `protobuf:"bytes,3,opt,name=source_subnet,json=sourceSubnet" json:"source_subnet,omitempty"`
 	// One or more labels that constrain the applicability of a rule to
-	// sources with the given labels.
+	// workloads with the given labels. If the route rule has a list of
+	// gateways specified at the top, it should include the reserved gateway
+	// "mesh" in order for this field to be applicable.
 	SourceLabels map[string]string `protobuf:"bytes,4,rep,name=source_labels,json=sourceLabels" json:"source_labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// Names of gateways where the rule should be applied to. Gateway names
+	// at the top of the rule (if any) are overridden. The gateway match is
+	// independent of sourceLabels.
+	Gateways []string `protobuf:"bytes,5,rep,name=gateways" json:"gateways,omitempty"`
 }
 
 func (m *L4MatchAttributes) Reset()                    { *m = L4MatchAttributes{} }
@@ -667,6 +694,13 @@ func (m *L4MatchAttributes) GetSourceLabels() map[string]string {
 	return nil
 }
 
+func (m *L4MatchAttributes) GetGateways() []string {
+	if m != nil {
+		return m.Gateways
+	}
+	return nil
+}
+
 // HTTPRedirect can be used to send a 302 redirect response to the caller,
 // where the Authority/Host and the URI in the response can be swapped with
 // the specified values. For example, the following route rule redirects
@@ -1571,86 +1605,86 @@ func init() {
 func init() { proto.RegisterFile("routing/v1alpha2/route_rule.proto", fileDescriptor1) }
 
 var fileDescriptor1 = []byte{
-	// 1281 bytes of a gzipped FileDescriptorProto
-	0x1f, 0x8b, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0xff, 0xac, 0x57, 0xdd, 0x6e, 0xdb, 0xc6,
-	0x12, 0x8e, 0xfe, 0xad, 0xa1, 0x9d, 0x58, 0x8b, 0x20, 0xe0, 0x11, 0x0e, 0x0e, 0x6c, 0xe5, 0x1c,
-	0xc0, 0xa7, 0x45, 0xe5, 0x56, 0x49, 0x80, 0xfc, 0x34, 0x3f, 0xb6, 0x93, 0xd4, 0x05, 0x12, 0x24,
-	0xa0, 0xdd, 0xf6, 0xa2, 0x17, 0xec, 0x8a, 0x1a, 0x4b, 0x4c, 0x28, 0x2e, 0xbb, 0x5c, 0xc6, 0xd2,
-	0x3b, 0x14, 0xe8, 0x4d, 0x2f, 0x7a, 0xd3, 0xfb, 0x3e, 0x44, 0x2f, 0xfb, 0x1e, 0x7d, 0x93, 0xa2,
-	0xd8, 0xd9, 0xa5, 0xc4, 0x46, 0xb5, 0x24, 0xa3, 0xbd, 0xd3, 0xce, 0x7e, 0xdf, 0xec, 0x70, 0xf6,
-	0x9b, 0xd9, 0x11, 0xec, 0x4a, 0x91, 0xa9, 0x30, 0x1e, 0xee, 0xbf, 0xfb, 0x84, 0x47, 0xc9, 0x88,
-	0xf7, 0xf6, 0xb5, 0x01, 0x7d, 0x99, 0x45, 0xd8, 0x4d, 0xa4, 0x50, 0x82, 0xdd, 0x08, 0x53, 0x15,
-	0x8a, 0xae, 0x05, 0x76, 0x73, 0x60, 0xfb, 0x3f, 0x43, 0x21, 0x86, 0x11, 0xee, 0x13, 0xaa, 0x9f,
-	0x9d, 0xed, 0x0f, 0x32, 0xc9, 0x55, 0x28, 0x62, 0xc3, 0x5b, 0xdc, 0x3f, 0x97, 0x3c, 0x49, 0x50,
-	0xa6, 0x66, 0xbf, 0xf3, 0x73, 0x09, 0x9a, 0x9e, 0x3e, 0xcc, 0xcb, 0x22, 0x64, 0xd7, 0xa1, 0x36,
-	0x12, 0xa9, 0x4a, 0xdd, 0xd2, 0x4e, 0x65, 0xaf, 0xe9, 0x99, 0x05, 0x6b, 0xc3, 0xc6, 0x90, 0x2b,
-	0x3c, 0xe7, 0xd3, 0xd4, 0x2d, 0xd3, 0xc6, 0x6c, 0xcd, 0xee, 0x40, 0x75, 0xa4, 0x54, 0xe2, 0x56,
-	0x76, 0x2a, 0x7b, 0x4e, 0x6f, 0xb7, 0xfb, 0xd7, 0x61, 0x76, 0x8f, 0x4f, 0x4f, 0x5f, 0x9b, 0x63,
-	0x08, 0xce, 0x7a, 0x50, 0x51, 0x41, 0xe2, 0x56, 0x89, 0xb5, 0x73, 0x11, 0xeb, 0xf4, 0xc8, 0x92,
-	0x34, 0xb8, 0xf3, 0x5b, 0x09, 0x9c, 0xa7, 0x98, 0xaa, 0x30, 0xa6, 0x0f, 0x64, 0x0c, 0xaa, 0x31,
-	0x1f, 0xa3, 0x5b, 0xda, 0x29, 0xed, 0x35, 0x3d, 0xfa, 0xcd, 0x3e, 0x83, 0x7a, 0xc4, 0xfb, 0x18,
-	0x99, 0x40, 0x9d, 0xde, 0xfe, 0x45, 0xae, 0x0b, 0x8e, 0xba, 0x2f, 0x88, 0xf1, 0x2c, 0x56, 0x72,
-	0xea, 0x59, 0x3a, 0xbb, 0x0b, 0xd5, 0x44, 0x48, 0xe5, 0x56, 0x76, 0x4a, 0x7b, 0x4e, 0xef, 0xbf,
-	0x17, 0xb9, 0x79, 0x2d, 0xa4, 0x3a, 0xc1, 0x08, 0x03, 0x25, 0xa4, 0x47, 0x8c, 0xf6, 0x3d, 0x70,
-	0x0a, 0x0e, 0xd9, 0x36, 0x54, 0xde, 0xe2, 0xd4, 0x06, 0xa9, 0x7f, 0xea, 0x24, 0xbf, 0xe3, 0x51,
-	0x86, 0x6e, 0x99, 0x6c, 0x66, 0x71, 0xbf, 0x7c, 0xb7, 0xd4, 0xf9, 0xbe, 0x0e, 0xcd, 0x59, 0xa6,
-	0xd8, 0x23, 0xa8, 0x8d, 0xb9, 0x0a, 0x46, 0x74, 0x19, 0x4e, 0x6f, 0x6f, 0x59, 0x6e, 0x5f, 0x6a,
-	0xa0, 0x87, 0xdf, 0x66, 0x98, 0x2a, 0xcf, 0xd0, 0xd8, 0x63, 0xa8, 0x91, 0x8c, 0x6c, 0x2a, 0xfe,
-	0xbf, 0x46, 0x2a, 0xbe, 0xc2, 0x70, 0x38, 0x52, 0x9e, 0xe1, 0xb1, 0x27, 0xb0, 0x21, 0x71, 0x10,
-	0x4a, 0x0c, 0x56, 0xe6, 0x81, 0xa2, 0xb6, 0x58, 0x6f, 0xc6, 0x62, 0x0f, 0xa1, 0x21, 0xf1, 0x5c,
-	0x86, 0x0a, 0xdd, 0x2a, 0x39, 0xb8, 0xb9, 0xdc, 0x01, 0x41, 0xbd, 0x9c, 0xc3, 0x3e, 0x84, 0xd6,
-	0x39, 0xf6, 0x53, 0x11, 0xbc, 0x45, 0xe5, 0x67, 0xc9, 0x50, 0xf2, 0x01, 0xba, 0xb5, 0x9d, 0xd2,
-	0xde, 0x86, 0xb7, 0x3d, 0xdb, 0xf8, 0xc2, 0xd8, 0xd9, 0x2d, 0x68, 0xa8, 0x70, 0x8c, 0x22, 0x53,
-	0x6e, 0x9d, 0xce, 0xfa, 0x57, 0xd7, 0x68, 0xbf, 0x9b, 0x6b, 0xbf, 0xfb, 0xd4, 0xd6, 0x86, 0x97,
-	0x23, 0xd9, 0x03, 0x1d, 0xa0, 0x92, 0x21, 0xa6, 0x6e, 0x83, 0x48, 0xcb, 0x15, 0x8c, 0x5a, 0x22,
-	0x39, 0x83, 0x3d, 0x81, 0xda, 0x19, 0xcf, 0x22, 0xe5, 0x6e, 0x10, 0xf5, 0x83, 0x65, 0xd4, 0xe7,
-	0x1a, 0xf8, 0x79, 0xfc, 0x06, 0x03, 0x0a, 0xc0, 0x10, 0xd9, 0x03, 0xa8, 0x8f, 0x43, 0x29, 0x85,
-	0x74, 0x9b, 0xcb, 0xd3, 0x53, 0xb8, 0x23, 0xcf, 0x52, 0xd8, 0x11, 0x38, 0x81, 0x90, 0xa9, 0x9f,
-	0x88, 0x28, 0x0c, 0xa6, 0x2e, 0x90, 0x87, 0xce, 0x45, 0x1e, 0x8e, 0x84, 0x4c, 0x5f, 0x13, 0xd2,
-	0x83, 0x60, 0xf6, 0x9b, 0x7d, 0x0d, 0x57, 0x75, 0x3f, 0x88, 0x07, 0xfe, 0x08, 0xf9, 0x00, 0x65,
-	0xea, 0x3a, 0xa4, 0x96, 0xdb, 0x2b, 0x2b, 0xb9, 0x7b, 0x40, 0xbc, 0x63, 0x43, 0x33, 0xd5, 0xb3,
-	0xc5, 0x8b, 0xb6, 0xf6, 0x13, 0x60, 0x8b, 0xa0, 0x4b, 0x55, 0xc4, 0x77, 0x25, 0xd8, 0xc8, 0xbb,
-	0x80, 0x16, 0x74, 0xb1, 0x20, 0x2e, 0x14, 0xf4, 0x8b, 0xdb, 0x54, 0x0e, 0x07, 0x4a, 0xc9, 0xb0,
-	0x9f, 0x29, 0x4c, 0xff, 0xa9, 0x8a, 0xe8, 0xfc, 0x50, 0x83, 0xed, 0xf7, 0xcb, 0x8d, 0xdd, 0x81,
-	0x4a, 0x26, 0x43, 0xfa, 0x9e, 0x25, 0x37, 0x78, 0xa2, 0x64, 0x18, 0x0f, 0x0d, 0x51, 0xe3, 0xf5,
-	0xdd, 0xa7, 0xc1, 0x08, 0xc7, 0xe6, 0xab, 0xd7, 0x64, 0x5a, 0x0a, 0x09, 0x07, 0xd5, 0x48, 0x0c,
-	0x6c, 0x61, 0xae, 0x47, 0x36, 0x14, 0x76, 0x00, 0x4d, 0x9e, 0xa9, 0x91, 0x90, 0xa1, 0x9a, 0xae,
-	0xaa, 0xcb, 0x22, 0x7f, 0xce, 0x62, 0xaf, 0xa0, 0x91, 0xeb, 0xa5, 0x46, 0xb9, 0xbc, 0xb3, 0x6e,
-	0x77, 0xea, 0xfe, 0x49, 0x30, 0xb9, 0x97, 0x59, 0xbf, 0xad, 0x5f, 0xb6, 0xdf, 0x32, 0x1f, 0xb6,
-	0x52, 0x91, 0xc9, 0x00, 0x7d, 0xdb, 0xf9, 0x1b, 0x14, 0xd0, 0xfd, 0xb5, 0x03, 0x3a, 0x21, 0x76,
-	0xf1, 0x11, 0xd8, 0x4c, 0x0b, 0xa6, 0xb6, 0x0f, 0x9b, 0x2b, 0xf4, 0x7b, 0xaf, 0xa8, 0xdf, 0x35,
-	0x93, 0x39, 0x17, 0x79, 0xfb, 0x31, 0xb4, 0x16, 0x62, 0xb8, 0x54, 0x95, 0x48, 0x68, 0x2d, 0x48,
-	0x96, 0x3d, 0x03, 0x67, 0x30, 0x37, 0xae, 0x92, 0x67, 0xb1, 0xc1, 0x14, 0x79, 0xec, 0x06, 0xd4,
-	0xcf, 0xc9, 0x21, 0x1d, 0x5b, 0xf3, 0xec, 0xaa, 0xf3, 0x6b, 0x19, 0x5a, 0x0b, 0x85, 0xc6, 0x3e,
-	0x02, 0x56, 0x20, 0xfb, 0x69, 0xd6, 0x8f, 0x51, 0xd9, 0x8f, 0x68, 0x15, 0x76, 0x4e, 0x68, 0x63,
-	0x76, 0xeb, 0xe5, 0x4b, 0xdf, 0xfa, 0xcd, 0xd9, 0xad, 0xdb, 0x33, 0x2a, 0x74, 0x86, 0xbd, 0x39,
-	0xeb, 0xfe, 0x9b, 0xf7, 0xa5, 0x61, 0xe6, 0x8d, 0x07, 0x6b, 0x37, 0x8e, 0x95, 0xda, 0xf8, 0xdb,
-	0x57, 0xf7, 0x08, 0x36, 0x8b, 0x6f, 0xa7, 0xe6, 0xe6, 0xcd, 0xa4, 0x69, 0xfa, 0xc4, 0xbf, 0x8b,
-	0xd5, 0x6a, 0xf8, 0x73, 0x43, 0xe7, 0x21, 0x38, 0x85, 0xa7, 0xf3, 0xd2, 0x74, 0x04, 0xa7, 0x20,
-	0x4a, 0x76, 0x03, 0x6a, 0x38, 0xe1, 0x81, 0xbd, 0xb1, 0xe3, 0x2b, 0x9e, 0x59, 0x32, 0x17, 0xea,
-	0x89, 0xc4, 0xb3, 0x70, 0x62, 0x3c, 0x1c, 0x5f, 0xf1, 0xec, 0x5a, 0x33, 0x24, 0x0e, 0x71, 0x62,
-	0xf2, 0xaf, 0x19, 0xb4, 0x3c, 0xdc, 0x04, 0xa0, 0x9e, 0xeb, 0xab, 0x69, 0x82, 0x9d, 0x37, 0x76,
-	0xae, 0xd1, 0xef, 0xa7, 0x1e, 0x27, 0xb9, 0x52, 0x38, 0x4e, 0x68, 0xce, 0xd4, 0x9a, 0x9a, 0xad,
-	0xd9, 0x01, 0x5c, 0x4b, 0x50, 0xfa, 0x4a, 0x4e, 0xfd, 0xfc, 0x31, 0x2f, 0xaf, 0x7a, 0xcc, 0xb7,
-	0x12, 0x94, 0xa7, 0x72, 0x7a, 0x6a, 0xf0, 0x9d, 0x9f, 0xca, 0x00, 0xf3, 0xc7, 0x8e, 0xed, 0xc2,
-	0x26, 0x8f, 0x22, 0x71, 0xee, 0x0b, 0x19, 0x0e, 0xc3, 0xd8, 0x4e, 0xb6, 0x0e, 0xd9, 0x5e, 0x91,
-	0x49, 0x6b, 0xc9, 0x40, 0x4c, 0x7f, 0xcc, 0x87, 0x5c, 0xc3, 0x7b, 0x69, 0x6c, 0x73, 0x50, 0xde,
-	0xf7, 0x2a, 0x05, 0x90, 0xed, 0x0f, 0xec, 0x7f, 0x70, 0x15, 0x27, 0x89, 0x48, 0x71, 0x86, 0xaa,
-	0x12, 0x6a, 0xcb, 0x58, 0x73, 0x58, 0x0f, 0x1a, 0x63, 0x3e, 0xf1, 0xf9, 0xd0, 0x4c, 0x33, 0x4b,
-	0xbf, 0xae, 0x3e, 0xe6, 0x93, 0x83, 0xa1, 0x9e, 0x6c, 0x5b, 0xe6, 0xfc, 0x40, 0xe2, 0x00, 0x63,
-	0x15, 0xf2, 0x28, 0xb5, 0xdd, 0xb2, 0xbd, 0xc0, 0x3e, 0x14, 0x22, 0xfa, 0x52, 0x6b, 0xcc, 0xdb,
-	0x26, 0xd2, 0xd1, 0x9c, 0xd3, 0xf9, 0xbd, 0x02, 0x6c, 0x71, 0x22, 0x61, 0xcf, 0xa1, 0x36, 0xc0,
-	0x88, 0x4f, 0x6d, 0xa3, 0xf8, 0x78, 0xfd, 0x61, 0xa6, 0xfb, 0x54, 0xf3, 0x3c, 0x43, 0xd7, 0x7e,
-	0x78, 0x7f, 0x5e, 0xd3, 0x97, 0xf1, 0x73, 0xa0, 0x79, 0x9e, 0xa1, 0xb7, 0x7f, 0x29, 0x41, 0x8d,
-	0x1c, 0x33, 0x17, 0x1a, 0x09, 0xca, 0x00, 0x63, 0x65, 0xe5, 0x92, 0x2f, 0xd9, 0xa7, 0xe0, 0x9c,
-	0x85, 0x13, 0x1c, 0xf8, 0x26, 0xf2, 0x55, 0x4a, 0x39, 0xbe, 0xe2, 0x01, 0xe1, 0x8d, 0xdf, 0x63,
-	0x68, 0xe9, 0x6b, 0x89, 0x4d, 0x62, 0xac, 0x8f, 0xca, 0x6a, 0x1f, 0xdb, 0x05, 0x16, 0x79, 0x3a,
-	0x6c, 0xc1, 0x35, 0xfd, 0xaf, 0xc6, 0xb8, 0x20, 0xc5, 0xb7, 0x7f, 0x2c, 0x41, 0x8d, 0xbe, 0x67,
-	0x49, 0xf8, 0xbb, 0xe0, 0x10, 0x2d, 0x55, 0x5c, 0x65, 0xa9, 0xe9, 0xaf, 0x3a, 0x46, 0x6d, 0x3c,
-	0x21, 0x9b, 0x86, 0x0c, 0x65, 0x12, 0xe4, 0x90, 0xbc, 0xc8, 0x40, 0x1b, 0xe7, 0x10, 0x4d, 0xe8,
-	0xf9, 0x48, 0x83, 0x64, 0x35, 0x87, 0x90, 0xf1, 0x99, 0xb6, 0xe9, 0x62, 0xa4, 0x4d, 0x53, 0x8c,
-	0xcf, 0x61, 0xb3, 0xd8, 0x50, 0x75, 0x71, 0xc7, 0xd9, 0xb8, 0x8f, 0x92, 0xe2, 0xdb, 0xd2, 0xc5,
-	0x6d, 0xd6, 0xec, 0xba, 0xfd, 0x87, 0x95, 0x17, 0x3d, 0xad, 0x0e, 0xeb, 0xa6, 0x69, 0xf7, 0xeb,
-	0x94, 0x9c, 0x5b, 0x7f, 0x04, 0x00, 0x00, 0xff, 0xff, 0x5e, 0x7e, 0x57, 0x29, 0xbe, 0x0e, 0x00,
-	0x00,
+	// 1288 bytes of a gzipped FileDescriptorProto
+	0x1f, 0x8b, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0xff, 0xac, 0x57, 0xdd, 0x6e, 0x1b, 0x45,
+	0x14, 0xae, 0x7f, 0xd6, 0x8e, 0xcf, 0x26, 0x6d, 0x3c, 0xaa, 0xaa, 0xc5, 0x42, 0x28, 0x71, 0x41,
+	0x0a, 0x20, 0x1c, 0x70, 0x5b, 0xa9, 0x3f, 0xf4, 0x27, 0x49, 0x5b, 0x82, 0xd4, 0xaa, 0xd5, 0x26,
+	0xc0, 0x05, 0x17, 0xcb, 0x7a, 0x7d, 0x62, 0x6f, 0xbb, 0xde, 0x59, 0x66, 0x67, 0x1b, 0xfb, 0x1d,
+	0x90, 0xb8, 0xe5, 0x86, 0x7b, 0x2e, 0x79, 0x00, 0xde, 0x05, 0x9e, 0x04, 0xa1, 0x39, 0x33, 0x6b,
+	0x6f, 0x6b, 0xe2, 0x1f, 0xc1, 0x9d, 0xe7, 0xcc, 0xf7, 0x9d, 0x39, 0x7b, 0xe6, 0x3b, 0x67, 0x8e,
+	0x61, 0x57, 0xf0, 0x4c, 0x86, 0xf1, 0x60, 0xff, 0xcd, 0x17, 0x7e, 0x94, 0x0c, 0xfd, 0xee, 0xbe,
+	0x32, 0xa0, 0x27, 0xb2, 0x08, 0x3b, 0x89, 0xe0, 0x92, 0xb3, 0x6b, 0x61, 0x2a, 0x43, 0xde, 0x31,
+	0xc0, 0x4e, 0x0e, 0x6c, 0x7d, 0x30, 0xe0, 0x7c, 0x10, 0xe1, 0x3e, 0xa1, 0x7a, 0xd9, 0xd9, 0x7e,
+	0x3f, 0x13, 0xbe, 0x0c, 0x79, 0xac, 0x79, 0xf3, 0xfb, 0xe7, 0xc2, 0x4f, 0x12, 0x14, 0xa9, 0xde,
+	0x6f, 0xff, 0x56, 0x82, 0x86, 0xab, 0x0e, 0x73, 0xb3, 0x08, 0xd9, 0x55, 0xb0, 0x86, 0x3c, 0x95,
+	0xa9, 0x53, 0xda, 0xa9, 0xec, 0x35, 0x5c, 0xbd, 0x60, 0x2d, 0xd8, 0x18, 0xf8, 0x12, 0xcf, 0xfd,
+	0x49, 0xea, 0x94, 0x69, 0x63, 0xba, 0x66, 0xb7, 0xa0, 0x3a, 0x94, 0x32, 0x71, 0x2a, 0x3b, 0x95,
+	0x3d, 0xbb, 0xbb, 0xdb, 0xf9, 0xf7, 0x30, 0x3b, 0xc7, 0xa7, 0xa7, 0x2f, 0xf5, 0x31, 0x04, 0x67,
+	0x5d, 0xa8, 0xc8, 0x20, 0x71, 0xaa, 0xc4, 0xda, 0xb9, 0x88, 0x75, 0x7a, 0x64, 0x48, 0x0a, 0xdc,
+	0xfe, 0xb3, 0x04, 0xf6, 0x63, 0x4c, 0x65, 0x18, 0xd3, 0x07, 0x32, 0x06, 0xd5, 0xd8, 0x1f, 0xa1,
+	0x53, 0xda, 0x29, 0xed, 0x35, 0x5c, 0xfa, 0xcd, 0xbe, 0x82, 0x5a, 0xe4, 0xf7, 0x30, 0xd2, 0x81,
+	0xda, 0xdd, 0xfd, 0x8b, 0x5c, 0x17, 0x1c, 0x75, 0x9e, 0x11, 0xe3, 0x49, 0x2c, 0xc5, 0xc4, 0x35,
+	0x74, 0x76, 0x1b, 0xaa, 0x09, 0x17, 0xd2, 0xa9, 0xec, 0x94, 0xf6, 0xec, 0xee, 0x87, 0x17, 0xb9,
+	0x79, 0xc9, 0x85, 0x3c, 0xc1, 0x08, 0x03, 0xc9, 0x85, 0x4b, 0x8c, 0xd6, 0x1d, 0xb0, 0x0b, 0x0e,
+	0xd9, 0x36, 0x54, 0x5e, 0xe3, 0xc4, 0x04, 0xa9, 0x7e, 0xaa, 0x24, 0xbf, 0xf1, 0xa3, 0x0c, 0x9d,
+	0x32, 0xd9, 0xf4, 0xe2, 0x6e, 0xf9, 0x76, 0xa9, 0xfd, 0x73, 0x0d, 0x1a, 0xd3, 0x4c, 0xb1, 0x07,
+	0x60, 0x8d, 0x7c, 0x19, 0x0c, 0xe9, 0x32, 0xec, 0xee, 0xde, 0xa2, 0xdc, 0x3e, 0x57, 0x40, 0x17,
+	0x7f, 0xcc, 0x30, 0x95, 0xae, 0xa6, 0xb1, 0x87, 0x60, 0x91, 0x8c, 0x4c, 0x2a, 0x3e, 0x5e, 0x21,
+	0x15, 0xdf, 0x61, 0x38, 0x18, 0x4a, 0x57, 0xf3, 0xd8, 0x23, 0xd8, 0x10, 0xd8, 0x0f, 0x05, 0x06,
+	0x4b, 0xf3, 0x40, 0x51, 0x1b, 0xac, 0x3b, 0x65, 0xb1, 0xfb, 0x50, 0x17, 0x78, 0x2e, 0x42, 0x89,
+	0x4e, 0x95, 0x1c, 0x5c, 0x5f, 0xec, 0x80, 0xa0, 0x6e, 0xce, 0x61, 0x9f, 0x42, 0xf3, 0x1c, 0x7b,
+	0x29, 0x0f, 0x5e, 0xa3, 0xf4, 0xb2, 0x64, 0x20, 0xfc, 0x3e, 0x3a, 0xd6, 0x4e, 0x69, 0x6f, 0xc3,
+	0xdd, 0x9e, 0x6e, 0x7c, 0xa3, 0xed, 0xec, 0x06, 0xd4, 0x65, 0x38, 0x42, 0x9e, 0x49, 0xa7, 0x46,
+	0x67, 0xbd, 0xd7, 0xd1, 0xda, 0xef, 0xe4, 0xda, 0xef, 0x3c, 0x36, 0xb5, 0xe1, 0xe6, 0x48, 0x76,
+	0x4f, 0x05, 0x28, 0x45, 0x88, 0xa9, 0x53, 0x27, 0xd2, 0x62, 0x05, 0xa3, 0x92, 0x48, 0xce, 0x60,
+	0x8f, 0xc0, 0x3a, 0xf3, 0xb3, 0x48, 0x3a, 0x1b, 0x44, 0xfd, 0x64, 0x11, 0xf5, 0xa9, 0x02, 0x7e,
+	0x1d, 0xbf, 0xc2, 0x80, 0x02, 0xd0, 0x44, 0x76, 0x0f, 0x6a, 0xa3, 0x50, 0x08, 0x2e, 0x9c, 0xc6,
+	0xe2, 0xf4, 0x14, 0xee, 0xc8, 0x35, 0x14, 0x76, 0x04, 0x76, 0xc0, 0x45, 0xea, 0x25, 0x3c, 0x0a,
+	0x83, 0x89, 0x03, 0xe4, 0xa1, 0x7d, 0x91, 0x87, 0x23, 0x2e, 0xd2, 0x97, 0x84, 0x74, 0x21, 0x98,
+	0xfe, 0x66, 0xdf, 0xc3, 0x65, 0xd5, 0x0f, 0xe2, 0xbe, 0x37, 0x44, 0xbf, 0x8f, 0x22, 0x75, 0x6c,
+	0x52, 0xcb, 0xcd, 0xa5, 0x95, 0xdc, 0x39, 0x20, 0xde, 0xb1, 0xa6, 0xe9, 0xea, 0xd9, 0xf2, 0x8b,
+	0xb6, 0xd6, 0x23, 0x60, 0xf3, 0xa0, 0xb5, 0x2a, 0xe2, 0xa7, 0x12, 0x6c, 0xe4, 0x5d, 0x40, 0x09,
+	0xba, 0x58, 0x10, 0x17, 0x0a, 0xfa, 0xd9, 0x4d, 0x2a, 0x87, 0x03, 0x29, 0x45, 0xd8, 0xcb, 0x24,
+	0xa6, 0xff, 0x57, 0x45, 0xb4, 0x7f, 0xb7, 0x60, 0xfb, 0xdd, 0x72, 0x63, 0xb7, 0xa0, 0x92, 0x89,
+	0x90, 0xbe, 0x67, 0xc1, 0x0d, 0x9e, 0x48, 0x11, 0xc6, 0x03, 0x4d, 0x54, 0x78, 0x75, 0xf7, 0x69,
+	0x30, 0xc4, 0x91, 0xfe, 0xea, 0x15, 0x99, 0x86, 0x42, 0xc2, 0x41, 0x39, 0xe4, 0x7d, 0x53, 0x98,
+	0xab, 0x91, 0x35, 0x85, 0x1d, 0x40, 0xc3, 0xcf, 0xe4, 0x90, 0x8b, 0x50, 0x4e, 0x96, 0xd5, 0x65,
+	0x91, 0x3f, 0x63, 0xb1, 0x17, 0x50, 0xcf, 0xf5, 0x62, 0x51, 0x2e, 0x6f, 0xad, 0xda, 0x9d, 0x3a,
+	0x6f, 0x09, 0x26, 0xf7, 0x32, 0xed, 0xb7, 0xb5, 0x75, 0xfb, 0x2d, 0xf3, 0x60, 0x2b, 0xe5, 0x99,
+	0x08, 0xd0, 0x33, 0x9d, 0xbf, 0x4e, 0x01, 0xdd, 0x5d, 0x39, 0xa0, 0x13, 0x62, 0x17, 0x1f, 0x81,
+	0xcd, 0xb4, 0x60, 0x7a, 0xeb, 0xf9, 0xdb, 0x78, 0xfb, 0xf9, 0x6b, 0x79, 0xb0, 0xb9, 0x44, 0xdb,
+	0x77, 0x8a, 0xda, 0x5e, 0x31, 0xd1, 0xb3, 0x02, 0x68, 0x3d, 0x84, 0xe6, 0x5c, 0x7c, 0x6b, 0x55,
+	0x90, 0x80, 0xe6, 0x9c, 0x9c, 0xd9, 0x13, 0xb0, 0xfb, 0x33, 0xe3, 0x32, 0xe9, 0x16, 0x9b, 0x4f,
+	0x91, 0xc7, 0xae, 0x41, 0xed, 0x9c, 0x1c, 0xd2, 0xb1, 0x96, 0x6b, 0x56, 0xed, 0xbf, 0xca, 0xd0,
+	0x9c, 0x2b, 0x42, 0xf6, 0x19, 0xb0, 0x02, 0xd9, 0x4b, 0xb3, 0x5e, 0x8c, 0xd2, 0x7c, 0x44, 0xb3,
+	0xb0, 0x73, 0x42, 0x1b, 0x53, 0x45, 0x94, 0xd7, 0x56, 0xc4, 0xf5, 0xa9, 0x22, 0xcc, 0x19, 0x15,
+	0x3a, 0xc3, 0xdc, 0xaa, 0x71, 0xff, 0xc3, 0xbb, 0xb2, 0xd1, 0xb3, 0xc8, 0xbd, 0x95, 0x9b, 0xca,
+	0x5a, 0xba, 0xb1, 0xde, 0xd1, 0xcd, 0x7f, 0xbe, 0xd6, 0x07, 0xb0, 0x59, 0x7c, 0x73, 0x15, 0x37,
+	0x6f, 0x42, 0x0d, 0xdd, 0x5f, 0xde, 0x2f, 0x56, 0xb9, 0xe6, 0xcf, 0x0c, 0xed, 0xfb, 0x60, 0x17,
+	0x9e, 0xdc, 0xb5, 0xe9, 0x08, 0x76, 0x41, 0xb0, 0xec, 0x1a, 0x58, 0x38, 0xf6, 0x03, 0x73, 0x9b,
+	0xc7, 0x97, 0x5c, 0xbd, 0x64, 0x0e, 0xd4, 0x12, 0x81, 0x67, 0xe1, 0x58, 0x7b, 0x38, 0xbe, 0xe4,
+	0x9a, 0xb5, 0x62, 0x08, 0x1c, 0xe0, 0x58, 0xdf, 0x8d, 0x62, 0xd0, 0xf2, 0x70, 0x13, 0x80, 0x7a,
+	0xb5, 0x27, 0x27, 0x09, 0xb6, 0x5f, 0x99, 0x79, 0x48, 0xbd, 0xbb, 0x2a, 0x9f, 0xbe, 0x94, 0x38,
+	0x4a, 0x68, 0x3e, 0x55, 0x7a, 0x9b, 0xae, 0xd9, 0x01, 0x5c, 0x49, 0x50, 0x78, 0x52, 0x4c, 0xbc,
+	0x7c, 0x08, 0x28, 0x2f, 0x1b, 0x02, 0xb6, 0x12, 0x14, 0xa7, 0x62, 0x72, 0xaa, 0xf1, 0xed, 0x5f,
+	0xcb, 0x00, 0xb3, 0x47, 0x92, 0xed, 0xc2, 0xa6, 0x1f, 0x45, 0xfc, 0xdc, 0xe3, 0x22, 0x1c, 0x84,
+	0xb1, 0x99, 0x88, 0x6d, 0xb2, 0xbd, 0x20, 0x93, 0xd2, 0x99, 0x86, 0xe8, 0xbe, 0x9a, 0x0f, 0xc7,
+	0x9a, 0xf7, 0x5c, 0xdb, 0x66, 0xa0, 0xbc, 0x5f, 0x56, 0x0a, 0x20, 0xd3, 0x3b, 0xd8, 0x47, 0x70,
+	0x19, 0xc7, 0x09, 0x4f, 0x71, 0x8a, 0xaa, 0x12, 0x6a, 0x4b, 0x5b, 0x73, 0x58, 0x17, 0xea, 0x23,
+	0x7f, 0xec, 0xf9, 0x03, 0x3d, 0x05, 0x2d, 0xfc, 0xba, 0xda, 0xc8, 0x1f, 0x1f, 0x0c, 0xd4, 0x44,
+	0xdc, 0xd4, 0xe7, 0x07, 0x02, 0xfb, 0x18, 0xcb, 0xd0, 0x8f, 0x52, 0xd3, 0x65, 0x5b, 0x73, 0xec,
+	0x43, 0xce, 0xa3, 0x6f, 0x95, 0xc6, 0xdc, 0x6d, 0x22, 0x1d, 0xcd, 0x38, 0xed, 0xbf, 0x2b, 0xc0,
+	0xe6, 0x27, 0x19, 0xf6, 0x14, 0xac, 0x3e, 0x46, 0xfe, 0xc4, 0x34, 0x91, 0xcf, 0x57, 0x1f, 0x82,
+	0x3a, 0x8f, 0x15, 0xcf, 0xd5, 0x74, 0xe5, 0xc7, 0xef, 0xcd, 0xea, 0x7d, 0x1d, 0x3f, 0x07, 0x8a,
+	0xe7, 0x6a, 0x7a, 0xeb, 0x8f, 0x12, 0x58, 0xe4, 0x98, 0x39, 0x50, 0x4f, 0x50, 0x04, 0x18, 0x4b,
+	0x23, 0x97, 0x7c, 0xc9, 0xbe, 0x04, 0xfb, 0x2c, 0x1c, 0x63, 0xdf, 0xd3, 0x91, 0x2f, 0x53, 0xca,
+	0xf1, 0x25, 0x17, 0x08, 0xaf, 0xfd, 0x1e, 0x43, 0x53, 0x5d, 0x4b, 0xac, 0x13, 0x63, 0x7c, 0x54,
+	0x96, 0xfb, 0xd8, 0x2e, 0xb0, 0xc8, 0xd3, 0x61, 0x13, 0xae, 0xa8, 0x7f, 0x43, 0xda, 0x05, 0x29,
+	0xbe, 0xf5, 0x4b, 0x09, 0x2c, 0xfa, 0x9e, 0x05, 0xe1, 0xef, 0x82, 0x4d, 0xb4, 0x54, 0xfa, 0x32,
+	0x4b, 0x75, 0xef, 0x55, 0x31, 0x2a, 0xe3, 0x09, 0xd9, 0x14, 0x64, 0x20, 0x92, 0x20, 0x87, 0xe4,
+	0x45, 0x06, 0xca, 0x38, 0x83, 0x28, 0x42, 0xd7, 0x43, 0x1a, 0x40, 0xab, 0x39, 0x84, 0x8c, 0x4f,
+	0x94, 0x4d, 0x15, 0x23, 0x6d, 0xea, 0x62, 0x7c, 0x0a, 0x9b, 0xc5, 0x66, 0xab, 0x8a, 0x3b, 0xce,
+	0x46, 0x3d, 0x14, 0x14, 0xdf, 0x96, 0x2a, 0x6e, 0xbd, 0x66, 0x57, 0xcd, 0x3f, 0xb3, 0xbc, 0xe8,
+	0x69, 0x75, 0x58, 0xd3, 0x0d, 0xbd, 0x57, 0xa3, 0xe4, 0xdc, 0xf8, 0x27, 0x00, 0x00, 0xff, 0xff,
+	0xaf, 0x79, 0x55, 0xb9, 0xf6, 0x0e, 0x00, 0x00,
 }
diff --git a/routing/v1alpha2/route_rule.proto b/routing/v1alpha2/route_rule.proto
index 9afb9485d8b..c8fb3fb7564 100644
--- a/routing/v1alpha2/route_rule.proto
+++ b/routing/v1alpha2/route_rule.proto
@@ -62,7 +62,9 @@ package istio.routing.v1alpha2;
 // For example, the following rule routes all traffic by default to pods of
 // reviews service with label "version: v1". In addition, HTTP requests
 // containing for /wpcatalog/, /consumercatalog/ url prefixes will be
-// rewritten to /api/v2 and send to pods with label version: v2.
+// rewritten to /api/v2 and send to pods with label version: v2. The rule
+// will be applied at the gateway named "bookinfo" as well as at all the
+// sidecars in the mesh (indicated by the reserved gateway name "mesh").
 //
 //     apiVersion: config.istio.io/v1alpha2
 //     kind: RouteRule
@@ -71,6 +73,9 @@ package istio.routing.v1alpha2;
 //     spec:
 //       hosts:
 //       - reviews
+//       gateways: #if omitted, defaults to "sidecars"
+//       - bookinfo
+//       - mesh
 //       http:
 //       - match:
 //         - uri:
@@ -117,13 +122,16 @@ message RouteRule {
   // CIDR prefix can be used.
   repeated string hosts = 1;
 
-  // The names of gateways that should apply these routes. A single route
-  // rule could be used for sources inside the mesh as well as one or more
-  // gateways. The selection condition imposed by this field is
-  // independant of the sourceLabels match condition in HTTP/TCP routes. It
-  // is possible to define a route rule that applies to both the gateway
-  // and a specific internal workload by specifying gateways as well as the
-  // source match condition in HTTP/TCP routes.
+  // The names of gateways and sidecars that should apply these routes. A
+  // single route rule is used for sidecars inside the mesh as well
+  // as for one or more gateways. The selection condition imposed by this field
+  // can be overridden using the source field in the match conditions of HTTP/TCP
+  // routes. The reserved word "mesh" is used to imply all the sidecars in
+  // the mesh. When this field is omitted, the default gateway ("mesh")
+  // will be used, which would apply the rule to all sidecars in the
+  // mesh. If a list of gateway names is provided, the rule will apply
+  // only to the gateways. To apply a rule to both gateways and sidecars,
+  // specify "mesh" as one of the gateway names.
   repeated string gateways = 2;
 
   // A list of routes for HTTP traffic.
@@ -246,7 +254,7 @@ message HTTPRoute {
 //       tcp:
 //       - match:
 //         - port:
-//             name: Mongo #only applies to ports named Mongo
+//             name: Mongo # only applies to ports named Mongo
 //           sourceSubnet: "172.17.16.0/24"
 //         route:
 //         - destination:
@@ -270,7 +278,7 @@ message TCPRoute {
 // route rule to be applied to the HTTP request. For example, the following
 // route rule restricts the rule to match only requests where the URL path
 // starts with /ratings/v2/ and the request contains a "cookie" with value
-// "user=jason",
+// "user=jason".
 //
 //     apiVersion: config.istio.io/v1alpha2
 //     kind: RouteRule
@@ -361,8 +369,15 @@ message HTTPMatchRequest {
   PortSelector port = 6;
 
   // One or more labels that constrain the applicability of a rule to
-  // sources with the given labels.
+  // workloads with the given labels. If the route rule has a list of
+  // gateways specified at the top, it should include the reserved gateway
+  // "mesh" in order for this field to be applicable.
   map<string, string> source_labels = 7;
+
+  // Names of gateways where the rule should be applied to. Gateway names
+  // at the top of the rule (if any) are overridden. The gateway match is
+  // independent of sourceLabels.
+  repeated string gateways = 8;
 }
 
 // Each routing rule is associated with one or more service versions (see
@@ -428,8 +443,15 @@ message L4MatchAttributes {
   string source_subnet = 3;
 
   // One or more labels that constrain the applicability of a rule to
-  // sources with the given labels.
+  // workloads with the given labels. If the route rule has a list of
+  // gateways specified at the top, it should include the reserved gateway
+  // "mesh" in order for this field to be applicable.
   map<string, string> source_labels = 4;
+
+  // Names of gateways where the rule should be applied to. Gateway names
+  // at the top of the rule (if any) are overridden. The gateway match is
+  // independent of sourceLabels.
+  repeated string gateways = 5;
 }
 
 // HTTPRedirect can be used to send a 302 redirect response to the caller,