Need help on Istio Service Mesh

Question

I have a very unique problem. We are looking to restrict some outgoing communications from the EC2 instance, which is part of the service mesh. The rule is We want to restrict calls to specific subdomains of any domain. We don't have the domain list; we only know about the subdomain. Is there any way we can achieve this? Based on the documentation I have read, the destination rule hosts field only allows wild cards for subdomains and not for domains.

One solution is to dynamically update the hosts every time a domain is added to the set, to make it always updated, which is not a possible alternative for me

Any pointers would be appreciated.

I cannot proceed as the hosts element for domains do not support the wild cards.