diff --git a/internal/constellation/helm/values.go b/internal/constellation/helm/values.go
index 60913c2f54..d2d5d93f61 100644
--- a/internal/constellation/helm/values.go
+++ b/internal/constellation/helm/values.go
@@ -49,6 +49,9 @@ var ciliumVals = map[string]map[string]any{
 				"useDigest":     true,
 			},
 		},
+		"bpf": map[string]any{
+			"masquerade": true,
+		},
 		"kubeProxyReplacement":                "strict",
 		"enableCiliumEndpointSlice":           true,
 		"kubeProxyReplacementHealthzBindAddr": "0.0.0.0:10256",
@@ -92,6 +95,9 @@ var ciliumVals = map[string]map[string]any{
 				"useDigest":     true,
 			},
 		},
+		"bpf": map[string]any{
+			"masquerade": true,
+		},
 		"egressMasqueradeInterfaces":          "eth0",
 		"enableIPv4Masquerade":                true,
 		"kubeProxyReplacement":                "strict",
@@ -133,6 +139,9 @@ var ciliumVals = map[string]map[string]any{
 		"ipam": map[string]any{
 			"mode": "kubernetes",
 		},
+		"bpf": map[string]any{
+			"masquerade": true,
+		},
 		"kubeProxyReplacement":                "strict",
 		"enableCiliumEndpointSlice":           true,
 		"kubeProxyReplacementHealthzBindAddr": "0.0.0.0:10256",
@@ -175,6 +184,9 @@ var ciliumVals = map[string]map[string]any{
 				"useDigest":     true,
 			},
 		},
+		"bpf": map[string]any{
+			"masquerade": true,
+		},
 		"kubeProxyReplacement":                "strict",
 		"enableCiliumEndpointSlice":           true,
 		"kubeProxyReplacementHealthzBindAddr": "0.0.0.0:10256",
@@ -215,6 +227,9 @@ var ciliumVals = map[string]map[string]any{
 				},
 			},
 		},
+		"bpf": map[string]any{
+			"masquerade": true,
+		},
 		"kubeProxyReplacement":                "strict",
 		"enableCiliumEndpointSlice":           true,
 		"kubeProxyReplacementHealthzBindAddr": "0.0.0.0:10256",