diff --git a/bazel/extension_config/extensions_build_config.bzl b/bazel/extension_config/extensions_build_config.bzl
index fb80dd93816..a892ff23587 100644
--- a/bazel/extension_config/extensions_build_config.bzl
+++ b/bazel/extension_config/extensions_build_config.bzl
@@ -507,7 +507,7 @@ ISTIO_ENABLED_CONTRIB_EXTENSIONS = [
     "envoy.filters.network.sip_proxy",
     "envoy.filters.sip.router",
     "envoy.tls.key_providers.cryptomb",
-    # "envoy.tls.key_providers.qat", # TODO enable this later
+    "envoy.tls.key_providers.qat",
     "envoy.network.connection_balance.dlb",
 ]