diff --git a/lib/ns/interfacemgr.c b/lib/ns/interfacemgr.c
index 3bbeee2a50..1e9011bf11 100644
--- a/lib/ns/interfacemgr.c
+++ b/lib/ns/interfacemgr.c
@@ -28,6 +28,7 @@
 #include <ns/log.h>
 #include <ns/interfacemgr.h>
 #include <ns/server.h>
+#include <ns/stats.h>
 
 #ifdef HAVE_NET_ROUTE_H
 #include <net/route.h>
@@ -458,6 +459,7 @@ ns_interface_listenudp(ns_interface_t *ifp) {
 
 static isc_result_t
 ns_interface_listentcp(ns_interface_t *ifp) {
+	unsigned int tcpquota;
 	isc_result_t result;
 
 	result = isc_nm_listentcpdns(ifp->mgr->nm,
@@ -473,6 +475,16 @@ ns_interface_listentcp(ns_interface_t *ifp) {
 				 isc_result_totext(result));
 	}
 
+	/*
+	 * We update tcp-highwater stats here, since named itself adds to
+	 * the TCP quota when starting, as it ensures that at least one
+	 * client will be created for every interface it is listening to.
+	 */
+	tcpquota = isc_quota_getused(&ifp->mgr->sctx->tcpquota);
+	ns_stats_update_if_greater(ifp->mgr->sctx->nsstats,
+				   ns_statscounter_tcphighwater,
+				   tcpquota);
+
 #if 0
 #ifndef ISC_ALLOW_MAPPED
 	isc_socket_ipv6only(ifp->tcpsocket, true);