diff --git a/services/cilium/deploy/app/helm-release.yaml b/services/cilium/deploy/app/helm-release.yaml
index 820e1c2..e4cdf32 100644
--- a/services/cilium/deploy/app/helm-release.yaml
+++ b/services/cilium/deploy/app/helm-release.yaml
@@ -17,7 +17,7 @@ spec:
     kubeProxyReplacement: true
     installCRDs: true
     routingMode: native
-    enableIPv4Masquerade: false # using bpf.masquerade: true
+    enableIPv4Masquerade: true # required even if using bpf.masquerade: true
     autoDirectNodeRoutes: true
     bpf:
       masquerade: true