diff --git a/pilot/pkg/networking/core/v1alpha3/gateway.go b/pilot/pkg/networking/core/v1alpha3/gateway.go
index 8ace2b2a73b2..86efb63fb30e 100644
--- a/pilot/pkg/networking/core/v1alpha3/gateway.go
+++ b/pilot/pkg/networking/core/v1alpha3/gateway.go
@@ -16,6 +16,7 @@ package v1alpha3
 
 import (
 	"fmt"
+	"sort"
 	"strconv"
 	"strings"
 
@@ -821,5 +822,7 @@ func getSNIHostsForServer(server *networking.Server) []string {
 	for host := range sniHosts {
 		sniHostsSlice = append(sniHostsSlice, host)
 	}
+	sort.Strings(sniHostsSlice)
+
 	return sniHostsSlice
 }