diff --git a/cluster/saltbase/salt/docker/docker-defaults b/cluster/saltbase/salt/docker/docker-defaults
index 98a4f5b0d74..1317593c272 100644
--- a/cluster/saltbase/salt/docker/docker-defaults
+++ b/cluster/saltbase/salt/docker/docker-defaults
@@ -1 +1 @@
-DOCKER_OPTS="--bridge cbr0 --iptables=false -r=false"
+DOCKER_OPTS="--bridge cbr0 --iptables=false --ip-masq=false -r=false"
diff --git a/cluster/vagrant/provision-network.sh b/cluster/vagrant/provision-network.sh
index 00cbb6c3b24..42f0fc948f8 100755
--- a/cluster/vagrant/provision-network.sh
+++ b/cluster/vagrant/provision-network.sh
@@ -96,7 +96,7 @@ ip link set dev ${DOCKER_BRIDGE} up
 ovs-vsctl set Bridge ${OVS_SWITCH} stp_enable=true
 
 # modify the docker service file such that it uses the kube docker bridge and not its own
-sed -ie "s/ExecStart=\/usr\/bin\/docker -d/ExecStart=\/usr\/bin\/docker -d -b=${DOCKER_BRIDGE} --iptables=false/g" /usr/lib/systemd/system/docker.service
+sed -ie "s/ExecStart=\/usr\/bin\/docker -d/ExecStart=\/usr\/bin\/docker -d -b=${DOCKER_BRIDGE} --iptables=false --ip-masq=false/g" /usr/lib/systemd/system/docker.service
 systemctl daemon-reload
 systemctl restart docker.service