The io.l5d.ingress identifier matches the full host including port number against the ingress resource hosts. The ingress resource however only contains hosts, no ports, so any requests with a port number fail to match. For example, if a request is sent to http://test.com:80 no ingress rule will match even if there is one for test.com.