diff --git a/pkg/agent/syssetup/setup.go b/pkg/agent/syssetup/setup.go
index 8fea5bc6e4bc..2cb65cf6dd9f 100644
--- a/pkg/agent/syssetup/setup.go
+++ b/pkg/agent/syssetup/setup.go
@@ -34,6 +34,9 @@ func Configure(enableIPv6 bool, config *kubeproxyconfig.KubeProxyConntrackConfig
 	loadKernelModule("br_netfilter")
 	loadKernelModule("iptable_nat")
 	loadKernelModule("iptable_filter")
+	loadKernelModule("nft-expr-counter")
+	loadKernelModule("nfnetlink-subsys-11")
+	loadKernelModule("nft-chain-2-nat")
 	if enableIPv6 {
 		loadKernelModule("ip6table_nat")
 		loadKernelModule("ip6table_filter")