diff --git a/pkg/manifests/assets/dns/service.yaml b/pkg/manifests/assets/dns/service.yaml
index 6e3cd2ec8..be2b40110 100644
--- a/pkg/manifests/assets/dns/service.yaml
+++ b/pkg/manifests/assets/dns/service.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 spec:
   # clusterIP will be automatically managed.
   # selector is set at runtime
+  internalTrafficPolicy: Local
   trafficDistribution: PreferSameNode
   ports:
   - name: dns
diff --git a/pkg/operator/controller/controller_dns_service_test.go b/pkg/operator/controller/controller_dns_service_test.go
index dbdcbb710..61f3dc5b0 100644
--- a/pkg/operator/controller/controller_dns_service_test.go
+++ b/pkg/operator/controller/controller_dns_service_test.go
@@ -196,6 +196,17 @@ func TestDNSServiceChanged(t *testing.T) {
 	}
 }
 
+func TestDesiredDNSServiceInternalTrafficPolicy(t *testing.T) {
+	dns := &operatorv1.DNS{
+		ObjectMeta: metav1.ObjectMeta{Name: "default"},
+	}
+	daemonsetRef := metav1.OwnerReference{}
+	svc := desiredDNSService(dns, "172.30.0.10", false, daemonsetRef)
+
+	assert.NotNil(t, svc.Spec.InternalTrafficPolicy)
+	assert.Equal(t, corev1.ServiceInternalTrafficPolicyLocal, *svc.Spec.InternalTrafficPolicy)
+}
+
 func Test_shouldEnableTopologyAwareHints(t *testing.T) {
 	emptyLabels := map[string]string{}
 	someCPU := map[corev1.ResourceName]resource.Quantity{