diff --git a/infra/kube-vip/daemon-set.yaml b/infra/kube-vip/daemon-set.yaml
index b297806..98dbd68 100644
--- a/infra/kube-vip/daemon-set.yaml
+++ b/infra/kube-vip/daemon-set.yaml
@@ -2,18 +2,18 @@ apiVersion: apps/v1
 kind: DaemonSet
 metadata:
   labels:
-    app.kubernetes.io/name: kube-vip
-    app.kubernetes.io/version: v0.8.3
-  name: kube-vip
+    app.kubernetes.io/name: kube-vip-ds
+    app.kubernetes.io/version: v0.9.0
+  name: kube-vip-ds
 spec:
   selector:
     matchLabels:
-      app.kubernetes.io/name: kube-vip
+      app.kubernetes.io/name: kube-vip-ds
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: kube-vip
-        app.kubernetes.io/version: v0.8.3
+        app.kubernetes.io/name: kube-vip-ds
+        app.kubernetes.io/version: v0.9.0
     spec:
       affinity:
         nodeAffinity:
@@ -44,7 +44,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.annotations['feature.node.kubernetes.io/network-adapter']
-            - name: vip_cidr
+            - name: vip_subnet
               value: "32"
             - name: dns_mode
               value: first
@@ -74,7 +74,7 @@ spec:
               value: :2112
             - name: enableUPNP
               value: "true"
-          image: ghcr.io/kube-vip/kube-vip:v0.8.3
+          image: ghcr.io/kube-vip/kube-vip:v0.9.0
           imagePullPolicy: IfNotPresent
           name: kube-vip
           resources: {}
@@ -83,6 +83,8 @@ spec:
               add:
                 - NET_ADMIN
                 - NET_RAW
+              drop:
+                - ALL
       hostNetwork: true
       serviceAccountName: kube-vip
       tolerations: