diff --git a/deploy/provider/aws/patch-configmap-l7.yaml b/deploy/provider/aws/patch-configmap-l7.yaml
index c71eaab0a..b1bcd2a97 100644
--- a/deploy/provider/aws/patch-configmap-l7.yaml
+++ b/deploy/provider/aws/patch-configmap-l7.yaml
@@ -8,6 +8,7 @@ metadata:
     app.kubernetes.io/part-of: ingress-nginx
 data:
   use-proxy-protocol: "false"
-
+  use-forwarded-headers: "true"
+  proxy-real-ip-cidr: "0.0.0.0/0" # restrict this to the IP addresses of ELB
 ---