diff --git a/nodes/_defaults.yaml b/nodes/_defaults.yaml
index a7aa824..a0b3de8 100644
--- a/nodes/_defaults.yaml
+++ b/nodes/_defaults.yaml
@@ -27,5 +27,6 @@ patches:
   - !patch network
   - !patch vip
   - !patch tailscale
+  - !patch cilium
 patchesControlPlane:
   - !patch allow-control-plane-workloads
diff --git a/patches/cilium.yaml b/patches/cilium.yaml
new file mode 100644
index 0000000..fcde5de
--- /dev/null
+++ b/patches/cilium.yaml
@@ -0,0 +1,11 @@
+machine:
+  features:
+    hostDNS:
+      # This option is enabled by default and causes issues with cilium
+      forwardKubeDNSToHost: false
+cluster:
+  network:
+    cni:
+      name: none
+  proxy:
+    disabled: true