diff --git a/ChangeLog.md b/ChangeLog.md
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## 2.2.0
+
+- **Dependency bounds:** Raised lower bound of `http-reverse-proxy` to `>= 0.6.2.0`.
+  This is to incorporate upstream fixes for handling malformed `X-Forwarded-For` headers.
+  Older versions of `http-reverse-proxy` are no longer supported. [315](https://github.com/snoyberg/keter/pull/315)
+
 ## 2.1.10
 - bump optparse applicative @jappeace
 - Fix reloading stuck on crash-looping bundles @ktak-007 [314](https://github.com/snoyberg/keter/pull/314)
diff --git a/keter.cabal b/keter.cabal
--- a/keter.cabal
+++ b/keter.cabal
@@ -1,6 +1,6 @@
 cabal-version:      3.0
 name:               keter
-version:            2.1.10
+version:            2.2.0
 synopsis:
   Web application deployment manager, focusing on Haskell web frameworks. It mitigates downtime.
 
@@ -44,7 +44,7 @@
     , fsnotify              >=0.3.0    && <0.5
     , http-client           >=0.7.11   && <0.8
     , http-conduit          >=2.3.8    && <2.4
-    , http-reverse-proxy    >=0.6.1    && <0.7
+    , http-reverse-proxy    >=0.6.2    && <0.7
     , http-types            >=0.12.3   && <0.13
     , indexed-traversable   >=0.1.2    && <0.2
     , lifted-base           >=0.2.3    && <0.3
@@ -60,7 +60,7 @@
     , template-haskell      >=2.17.0   && <3.0
     , text                  >=1.2.5    && <3.0
     , time                  >=1.9.3    && <2.0
-    , tls                   >=1.5.7    && <2.2     
+    , tls                   >=1.5.7    && <2.2
     , tls-session-manager   >=0.0.4    && <0.1
     , transformers          >=0.5.6    && <0.7
     , unix                  >=2.7.2    && <2.9
@@ -94,9 +94,9 @@
     Keter.Plugin.Postgres
     Keter.PortPool
     Keter.Proxy
+    Keter.Rewrite
     Keter.SharedData.App
     Keter.SharedData.AppManager
-    Keter.Rewrite
     Keter.TempTarball
     Keter.Yaml.FilePath
 
@@ -104,9 +104,7 @@
     Keter.Aeson.KeyHelper
     Paths_keter
 
-  autogen-modules:
-    Paths_keter
-
+  autogen-modules:    Paths_keter
   ghc-options:        -Wall
   c-sources:          cbits/process-tracker.c
   hs-source-dirs:     src