diff --git a/infrastructure/nginx-system/README.md b/infrastructure/nginx-system/README.md
index 7a062e5017d7a7e432400c887ff32e0d05683f5c..bc5ccf85923791dc05eaa5a19379d40e9a75e5e6 100644
--- a/infrastructure/nginx-system/README.md
+++ b/infrastructure/nginx-system/README.md
@@ -3,6 +3,11 @@ nginx-system
 
 This component provides `ingress-nginx` as ingress solution to the cluster. It comes with some improved defaults, e.g. deploying a WAF by default.
 
+Nice to knows
+---
+
+- You have to enabled [`externalTrafficPolicy`](https://kubernetes.github.io/ingress-nginx/deploy/baremetal/#over-a-nodeport-service) to allow [`nginx.ingress.kubernetes.io/whitelist-source-range`](https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations/#whitelist-source-range)
+
 Links
 ---