Linkerd transparently applies mTLS to all TCP communication between meshed pods. However, there are still ways in which you may still have non-mTLS traffic in your system, including traffic to or from non-meshed pods (e.g. Kubernetes healthchecks), and traffic on ports that were marked as skip ports, which bypass the proxy entirely.