diff --git a/pkg/agent/syssetup/setup.go b/pkg/agent/syssetup/setup.go
index d0c3fe2e53..d19310fdbc 100644
--- a/pkg/agent/syssetup/setup.go
+++ b/pkg/agent/syssetup/setup.go
@@ -31,6 +31,7 @@ func Configure() {
 	loadKernelModule("overlay")
 	loadKernelModule("nf_conntrack")
 	loadKernelModule("br_netfilter")
+	loadKernelModule("iptable_nat")
 
 	// Kernel is inconsistent about how devconf is configured for
 	// new network namespaces between ipv4 and ipv6. Make sure to