diff --git a/kube/3-deploy/1-core/01-networking/cilium/install.yaml b/kube/3-deploy/1-core/01-networking/cilium/install.yaml
index d3207798..375858eb 100644
--- a/kube/3-deploy/1-core/01-networking/cilium/install.yaml
+++ b/kube/3-deploy/1-core/01-networking/cilium/install.yaml
@@ -131,6 +131,13 @@ spec:
       range: 9993,32767
     bandwidthManager:
       enabled: true
+      bbr: false # enable after Talos kernel updated to >= 5.18
+    bpf:
+      masquerade: true
+      tproxy: true
+    ipMasqAgent:
+      enabled: true
+    enableIPv6BIGTCP: false # enable after Talos kernel updated to >= 5.19
     l7Proxy: true
     hubble:
       enabled: true