diff --git a/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh b/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh
index c01fcc6..c26767b 100644
--- a/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh
+++ b/terraform/modules/k8s-cluster/templates/scripts/firewall-setup.sh
@@ -8,6 +8,7 @@ ufw allow 16443 comment "Kubernetes API endpoint"
 ufw allow 80 comment HTTP
 ufw allow 443 comment HTTPS
 ufw allow to ${node_ip} port 4244 comment "Hubble peer endpoint"
+ufw allow to ${node_ip} port 8472 comment "VXLAN connectivity"
 ufw allow to ${node_ip} port 9100 comment "Metrics endpoint"
 ufw allow to ${node_ip} port 9962 comment "Cilium agent metrics"
 ufw allow to ${node_ip} port 9963 comment "Cilium operator metrics"