diff --git a/nodeup/pkg/model/sysctls.go b/nodeup/pkg/model/sysctls.go
index 954f3233bd..2d853f830d 100644
--- a/nodeup/pkg/model/sysctls.go
+++ b/nodeup/pkg/model/sysctls.go
@@ -149,7 +149,7 @@ func (b *SysctlBuilder) Build(c *fi.ModelBuilderContext) error {
 		"net.ipv4.ip_forward=1",
 		"")
 
-	if params := b.InstanceGroup.Spec.SysctlParameters; len(params) > 0 {
+	if params := b.NodeupConfig.SysctlParameters; len(params) > 0 {
 		sysctls = append(sysctls,
 			"# Custom sysctl parameters from instance group spec",
 			"")
diff --git a/pkg/apis/nodeup/config.go b/pkg/apis/nodeup/config.go
index 8bb99eed8c..404b8f864b 100644
--- a/pkg/apis/nodeup/config.go
+++ b/pkg/apis/nodeup/config.go
@@ -48,6 +48,10 @@ type Config struct {
 	// StaticManifests describes generic static manifests
 	// Using this allows us to keep complex logic out of nodeup
 	StaticManifests []*StaticManifest `json:"staticManifests,omitempty"`
+	// SysctlParameters will configure kernel parameters using sysctl(8). When
+	// specified, each parameter must follow the form variable=value, the way
+	// it would appear in sysctl.conf.
+	SysctlParameters []string `json:",omitempty"`
 	// VolumeMounts are a collection of volume mounts.
 	VolumeMounts []*kops.VolumeMountSpec `json:",omitempty"`
 }
@@ -73,6 +77,7 @@ type StaticManifest struct {
 func NewConfig(cluster *kops.Cluster, instanceGroup *kops.InstanceGroup) *Config {
 	return &Config{
 		InstanceGroupRole: instanceGroup.Spec.Role,
+		SysctlParameters:  instanceGroup.Spec.SysctlParameters,
 		VolumeMounts:      instanceGroup.Spec.VolumeMounts,
 	}
 }