diff --git a/de/heat-templates/scripts/instance_boot.sh b/de/heat-templates/scripts/instance_boot.sh
index 977fe9d..43cfa06 100644
--- a/de/heat-templates/scripts/instance_boot.sh
+++ b/de/heat-templates/scripts/instance_boot.sh
@@ -456,6 +456,18 @@
     fi
 }
 
+function nested_virt_config {
+
+cat << EOF > /etc/modprobe.d/qemu-system-x86.conf
+options kvm_intel nested=1
+options kvm_intel enable_apicv=1
+options kvm_intel ept=1
+EOF
+
+    modprobe -r kvm_intel || true
+    modprobe kvm_intel nested=1
+
+}
 
 case "$NODE_TYPE" in
     # Please keep the "prepare_metadata_files", "disable-rp-filter", "network_config" and "prepare_network" functions
@@ -483,6 +495,7 @@
         disable_iptables_for_bridges
         ;;
     master)
+        nested_virt_config
         prepare_metadata_files
         disable_rp_filter
         network_config
@@ -502,6 +515,7 @@
         disable_iptables_for_bridges
         ;;
     worker)
+        nested_virt_config
         prepare_metadata_files
         disable_rp_filter
         network_config