diff --git a/api/filter/network/BUILD b/api/filter/network/BUILD
index 75b35f12..d495847f 100644
--- a/api/filter/network/BUILD
+++ b/api/filter/network/BUILD
@@ -53,6 +53,7 @@ api_proto_library(
 api_proto_library(
     name = "tcp_proxy",
     srcs = ["tcp_proxy.proto"],
+    deps = ["//api/filter:accesslog"],
 )
 
 api_proto_library(
diff --git a/api/filter/network/tcp_proxy.proto b/api/filter/network/tcp_proxy.proto
index 439a01e1..619b3f83 100644
--- a/api/filter/network/tcp_proxy.proto
+++ b/api/filter/network/tcp_proxy.proto
@@ -3,6 +3,8 @@ syntax = "proto3";
 package envoy.api.v2.filter.network;
 option go_package = "network";
 
+import "api/filter/accesslog.proto";
+
 import "google/protobuf/duration.proto";
 
 // [V2-API-DIFF] The route match now takes place in the FilterChainMatch table.
@@ -23,4 +25,7 @@ message TcpProxy {
   // timeout based on the last byte sent on the downstream/upstream connection.
   google.protobuf.Duration downstream_idle_timeout = 3;
   google.protobuf.Duration upstream_idle_timeout = 4;
+
+  // Configuration for access logs.
+  repeated AccessLog access_log = 5;
 }