diff --git a/CHANGELOG.md b/CHANGELOG.md
index b3706b2f..13a0f2d0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Add ingress rule in nodes Security Group to allow access to the Kubelet API when using ENI mode. This is needed by the metrics server to gather metrics from the Kubelet
 
+### Changed
+
+- Cilium: Replace no longer supported `tunnel` option by `routingMode`.
+
 ## [2.6.0] - 2025-01-23
 
 ### Changed
diff --git a/helm/cluster-aws/templates/_cilium_helmrelease_config.yaml b/helm/cluster-aws/templates/_cilium_helmrelease_config.yaml
index 4d87a274..5439fde2 100644
--- a/helm/cluster-aws/templates/_cilium_helmrelease_config.yaml
+++ b/helm/cluster-aws/templates/_cilium_helmrelease_config.yaml
@@ -12,7 +12,7 @@ eni:
   enabled: true
   awsReleaseExcessIPs: true
 enableIPv4Masquerade: false
-tunnel: disabled
+routingMode: native
 cluster:
     # Used by cilium to tag ENIs it creates and be able to filter and clean them up.
     name: {{ include "resource.default.name" $ | quote }}