diff --git a/changelogs/unreleased/6845-rvig-small.md b/changelogs/unreleased/6845-rvig-small.md
new file mode 100644
index 00000000000..05bc7628eae
--- /dev/null
+++ b/changelogs/unreleased/6845-rvig-small.md
@@ -0,0 +1 @@
+Set `allow_connect` to true on `Http2ProtocolOptions` on the Listener when websockets are enabled.
diff --git a/internal/envoy/v3/listener.go b/internal/envoy/v3/listener.go
index 213a71af9bf..b1ef7ecfd02 100644
--- a/internal/envoy/v3/listener.go
+++ b/internal/envoy/v3/listener.go
@@ -568,6 +568,7 @@ func (b *httpConnectionManagerBuilder) Get() *envoy_config_listener_v3.Filter {
 				UpgradeType: "websocket",
 			},
 		)
+		cm.Http2ProtocolOptions.AllowConnect = true
 	}
 
 	return &envoy_config_listener_v3.Filter{