In a service mesh architecture, which component is responsible for intercepting and managing traffic to and from a pod?