diff --git a/cilium-values.yaml b/cilium-values.yaml
index 989f0d2..f6af2e2 100644
--- a/cilium-values.yaml
+++ b/cilium-values.yaml
@@ -53,8 +53,8 @@ k8sClientRateLimit:
 # l2announcements:
 #   enabled: true
 
-# externalIPs:
-#   enabled: true
+externalIPs:
+  enabled: true
 
 enableCiliumEndpointSlice: true
 
@@ -68,12 +68,13 @@ loadBalancer:
 
 gatewayAPI:
   enabled: true
+  externalTrafficPolicy: Cluster
 
-# envoy:
-#   securityContext:
-#     capabilities:
-#       keepCapNetBindService: true
-#       envoy: [ NET_ADMIN, PERFMON, BPF ]
+envoy:
+  securityContext:
+    capabilities:
+      keepCapNetBindService: true
+      envoy: [ NET_ADMIN, PERFMON, BPF ]
 
 # ingressController:
 #   enabled: true